<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="4501">
<package pkgid="0368f349fe8e816b17ff6acc7b23d1dc1005654a7b30d0e1d70c8df8b381a614" name="389-ds" arch="aarch64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="74ab063994a334c92a80c7a9dfbfcc56824a20e07324e72a6a8749b27186ab35" name="389-ds" arch="ppc64le">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="10d9e56cef39561bc571393719dcc20e00dff6816ac281ddaccbf6450813fc90" name="389-ds" arch="s390x">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="438c7f3afee143fced09d054c2e05319ea90dd682d6bb3b3881fd20180eb4784" name="389-ds" arch="src">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="7b8236668af17a24a911b74a12789bacc4ddf32b8fb2abeb481759ef0a4505f9" name="389-ds" arch="x86_64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="b036e38d8fef144bfc9d31f87f9e334e100dd3d57cded5c344140857d68dc697" name="389-ds-devel" arch="aarch64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="7f9d66e0388c5523d9c9a9ad6b94b73d5e2265da179c9fd3182b1f4d1ba3be77" name="389-ds-devel" arch="ppc64le">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="f2fae075c0d6670eca4273f298d64da145f872b3204c85884bb3c76312f21b44" name="389-ds-devel" arch="s390x">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="fadd3fca1038747162f001095b1935d6c0eba834f39248e540f8e99f86d221d0" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="dac681f057dd17ebe044ffcd71b89b00d6aae6d0a05f118ec21b430d5717b6f8" name="389-ds-snmp" arch="aarch64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="619a7b637daba6d951bf78ef4010f62afa54b930860f2b647586268854e9a60b" name="389-ds-snmp" arch="ppc64le">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="afef0c94fc40cacffd96a9d7bacdfe57bd3c36da4b150855dca82fb6d5dc2bfe" name="389-ds-snmp" arch="s390x">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="8a70393192618581a8431af780dff751fa1decc8f9cf8694736b48c64dbe1035" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="dc9a15c71a90d0666d09766034e3b2fb0ac7ef144ac088f7c2b2b37169eecdd9" name="HANA-Firewall" arch="ppc64le">
  <version epoch="0" ver="2.0.4" rel="150000.3.9.3"/>
  <changelog author="varkoly@suse.com" date="1426161600">- Initial Version of HANA-Firewall</changelog>
  <changelog author="hguo@suse.com" date="1443787200">- Bring HANA-Firewall out of technical preview with feature
  enhancements and major code clean-up.</changelog>
  <changelog author="varkoly@suse.com" date="1444132800">- Fix names in sysconfig file</changelog>
  <changelog author="hguo@suse.com" date="1445428800">- Remove unnecesary defaults from sysconfig.</changelog>
  <changelog author="hguo@suse.com" date="1445601600">- Fully integrate with SUSE firewall.</changelog>
  <changelog author="hguo@suse.com" date="1446724800">- Add missing changelog macro in spec file.</changelog>
  <changelog author="hguo@suse.com" date="1464955200">- Improve prompts in create_new_service.
- Relax file permissions in hana-firewall.d directory.
- Fix result file location for create_new_service.
- fate#320564 fate#320376</changelog>
  <changelog author="hguo@suse.com" date="1470225600">- Fix typo and incorrectly assigned default value in sysconfig file.
  Bump version to 1.1.2. (bsc#991919)</changelog>
  <changelog author="hguo@suse.com" date="1470398400">- Add several more TCP ports that are vital to HA operation into
  firewall service definition file.
  Bump version to 1.1.3 (bsc#992376)</changelog>
  <changelog author="hguo@suse.com" date="1475755200">- Merge HANA firewall rules into an existing "customrules" script
  if it is present.
- Bump version to 1.1.4 (bsc#1002744);</changelog>
  <changelog author="hguo@suse.com" date="1508328000">- Upgrade to upstream version 2.0 to work with firewalld in SLES 15.</changelog>
  <changelog author="rbrown@suse.com" date="1517227200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hguo@suse.com" date="1518436800">- Upgrade to upstream version 2.0.1 to improve visibility of HANA
  related firewall services in firewalld configuration tool.
  (bsc#1080597)</changelog>
  <changelog author="abriel@suse.com" date="1648641600">- Adaption to new go compiler behavior regarding test and build
  (bsc#1197697)</changelog>
  <changelog author="varkoly@suse.com" date="1683028800">- Missing SCR Agent for reading and writing /etc/sysconfig/hana-firewall from yast2
  (bsc#1210981)</changelog>
  <changelog author="varkoly@suse.com" date="1715083200">- HANA-Firewall creates insufficient configuration.
  (bsc#1221231)</changelog>
</package>
<package pkgid="8b53ff293f23bcf3fbb1bed0f5435c971b581b964ee571c4ffbeb7fab48d7f4b" name="HANA-Firewall" arch="src">
  <version epoch="0" ver="2.0.4" rel="150000.3.9.3"/>
  <changelog author="varkoly@suse.com" date="1426161600">- Initial Version of HANA-Firewall</changelog>
  <changelog author="hguo@suse.com" date="1443787200">- Bring HANA-Firewall out of technical preview with feature
  enhancements and major code clean-up.</changelog>
  <changelog author="varkoly@suse.com" date="1444132800">- Fix names in sysconfig file</changelog>
  <changelog author="hguo@suse.com" date="1445428800">- Remove unnecesary defaults from sysconfig.</changelog>
  <changelog author="hguo@suse.com" date="1445601600">- Fully integrate with SUSE firewall.</changelog>
  <changelog author="hguo@suse.com" date="1446724800">- Add missing changelog macro in spec file.</changelog>
  <changelog author="hguo@suse.com" date="1464955200">- Improve prompts in create_new_service.
- Relax file permissions in hana-firewall.d directory.
- Fix result file location for create_new_service.
- fate#320564 fate#320376</changelog>
  <changelog author="hguo@suse.com" date="1470225600">- Fix typo and incorrectly assigned default value in sysconfig file.
  Bump version to 1.1.2. (bsc#991919)</changelog>
  <changelog author="hguo@suse.com" date="1470398400">- Add several more TCP ports that are vital to HA operation into
  firewall service definition file.
  Bump version to 1.1.3 (bsc#992376)</changelog>
  <changelog author="hguo@suse.com" date="1475755200">- Merge HANA firewall rules into an existing "customrules" script
  if it is present.
- Bump version to 1.1.4 (bsc#1002744);</changelog>
  <changelog author="hguo@suse.com" date="1508328000">- Upgrade to upstream version 2.0 to work with firewalld in SLES 15.</changelog>
  <changelog author="rbrown@suse.com" date="1517227200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hguo@suse.com" date="1518436800">- Upgrade to upstream version 2.0.1 to improve visibility of HANA
  related firewall services in firewalld configuration tool.
  (bsc#1080597)</changelog>
  <changelog author="abriel@suse.com" date="1648641600">- Adaption to new go compiler behavior regarding test and build
  (bsc#1197697)</changelog>
  <changelog author="varkoly@suse.com" date="1683028800">- Missing SCR Agent for reading and writing /etc/sysconfig/hana-firewall from yast2
  (bsc#1210981)</changelog>
  <changelog author="varkoly@suse.com" date="1715083200">- HANA-Firewall creates insufficient configuration.
  (bsc#1221231)</changelog>
</package>
<package pkgid="58763b5397666c5ab986d7c13f57f971e2129d71c08c52ac07580b9e1cc57088" name="HANA-Firewall" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="150000.3.9.3"/>
  <changelog author="varkoly@suse.com" date="1426161600">- Initial Version of HANA-Firewall</changelog>
  <changelog author="hguo@suse.com" date="1443787200">- Bring HANA-Firewall out of technical preview with feature
  enhancements and major code clean-up.</changelog>
  <changelog author="varkoly@suse.com" date="1444132800">- Fix names in sysconfig file</changelog>
  <changelog author="hguo@suse.com" date="1445428800">- Remove unnecesary defaults from sysconfig.</changelog>
  <changelog author="hguo@suse.com" date="1445601600">- Fully integrate with SUSE firewall.</changelog>
  <changelog author="hguo@suse.com" date="1446724800">- Add missing changelog macro in spec file.</changelog>
  <changelog author="hguo@suse.com" date="1464955200">- Improve prompts in create_new_service.
- Relax file permissions in hana-firewall.d directory.
- Fix result file location for create_new_service.
- fate#320564 fate#320376</changelog>
  <changelog author="hguo@suse.com" date="1470225600">- Fix typo and incorrectly assigned default value in sysconfig file.
  Bump version to 1.1.2. (bsc#991919)</changelog>
  <changelog author="hguo@suse.com" date="1470398400">- Add several more TCP ports that are vital to HA operation into
  firewall service definition file.
  Bump version to 1.1.3 (bsc#992376)</changelog>
  <changelog author="hguo@suse.com" date="1475755200">- Merge HANA firewall rules into an existing "customrules" script
  if it is present.
- Bump version to 1.1.4 (bsc#1002744);</changelog>
  <changelog author="hguo@suse.com" date="1508328000">- Upgrade to upstream version 2.0 to work with firewalld in SLES 15.</changelog>
  <changelog author="rbrown@suse.com" date="1517227200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hguo@suse.com" date="1518436800">- Upgrade to upstream version 2.0.1 to improve visibility of HANA
  related firewall services in firewalld configuration tool.
  (bsc#1080597)</changelog>
  <changelog author="abriel@suse.com" date="1648641600">- Adaption to new go compiler behavior regarding test and build
  (bsc#1197697)</changelog>
  <changelog author="varkoly@suse.com" date="1683028800">- Missing SCR Agent for reading and writing /etc/sysconfig/hana-firewall from yast2
  (bsc#1210981)</changelog>
  <changelog author="varkoly@suse.com" date="1715083200">- HANA-Firewall creates insufficient configuration.
  (bsc#1221231)</changelog>
</package>
<package pkgid="1a426f997cc0168ecb250364fa6604b47bcd0564f029c7a96afae394fe72025d" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="10c3b0c8f2f597d6580a54a4adda9bf9ac011410a30476be5929ab8d4453cdc4" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="139d13b84200eaf590a3950ad9c9edb2f585822b6b582f183465546e1820c4c6" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="f76af917fc4c70f5236b36bf156fb77aa60f71407d84ceb877cd21fc0029dc13" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="0647d6b6c26df1d92782e8063ff2efc261af7cb22923d6c7a0a57b709df0ef22" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="0a867cc6fe29af059fd9a019b0a45371226898ca55f7db97d1da4f8d968b4e89" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="775cb5b1262e75054931916e6c500ed37ec763927d3d7637671926564d507974" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="f85ff2fa61a348b098d2004d3253d2df409eef5a0e8d6d9a9cbc49d965ecfee2" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="353ad28e5e90b2dc2ad00684508d64ca2c4dcdffce3c8c9e67b47162aaa9086b" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="aeb0d4d06e328123cfd8d5c218b0791b702393a6abf48b00012cef6b28ef4813" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="33ea4eb4ab51cc90961ae963eecaa892187ec3eb943cbba95496a29cb3eb8194" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="611d3b156fa58af24da069e971d39665eb79babaae1c3b4e0370817f46f85946" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="91a543f88528f1d35ce378cdc6ce8d23d92958dced46de37bfe9a9c20898a3e7" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="7d54e5f452aad714cff64be8a5b8b7582877467dea14909f1a19a4a11baaeb8a" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="ac98abf438179cc49f7ddb43e9d817bc024f2697b3d8a9355cfdbbea2a6311d0" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="c7735404599a515eb10598b5620230e3d3e02bbd1b2afd3e30d1455705d26984" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="64fbb23b27dd8742e673b32e58d0a57cc6937b2f3efdd9ec94fcf0cc522c2ab1" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="99c67e8d4e5e38b75659a393cf7db1c93bb8332def0b0da48ddb3bbcaee65e42" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="2df986d3c29663c63bd844266742980a304098879109557029c5babd872af10e" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="e5cdf8e54a7b6a05049f8ee16fe02fa1c9e89779fa1a3b19ef77b70c465f0282" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="b619db515a9f17f66bf0c897a81b3ccd1c3f19f03254f7f8ee754a53c2251b32" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="72e8de1214271dd63914b16455ab6e8fc8a6eee7b449ec230a077114e5ad023c" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="38c9b6cec1929bfa81e25b6d12eeaa6405027a5b92ea1f392a40f4762f7a59c7" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="4c7daf43b9dd430d737a5c2564e8c985a72dfb4c5564f57d40a9f21888768b0a" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="0b4abb2816b124373052d1d6b8370136f6ae87e194162da8bce34c01b136a5aa" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="625fe220d319a75461d51aaf1ccb606910ebc642301ee863a613b8b6929d52f8" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="d239168a9ba82d08e37d384e2937a5f3efd7d4de49301d4d8c3cd493988b1185" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="b6b3147537ff9bac7ad826e834a5f8e88e832d056798e04878329d4adde0168c" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="4b59cc95780769fb8004993d76d4b853b43058adf680257674f06340823508fd" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="bfb9fea274045ed018f8019213803cc79fca5d309e94dcd31e7cba0ed1afe0dd" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="82df70694865d0df0a215345b32d14bdbd5c036deb02592a79a9be0fc93e503f" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="08c7580f7f4800d5f75ca922eca9e9b480814c47d7c5a7db0c22d1daa91cc349" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="13a5cf01a896d0af22c397c7978dfefbd6e0b5c47da5ea2fd965ed364b0d9532" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="72967cd2b217d78d02c6305ed0f22a84e80591973cbad7a1662b65fd6e2c4026" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="d64997d19bb0561152de9d518f4a5d38f998f007857e56650aa60cb4661b2593" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="0ac18b62f170b14e4d2d4313d9e6912c0a484955477571000a37f7e27e3e227b" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="115.12.0" rel="150200.152.140.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-22 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1717675200">- Firefox Extended Support Release 115.12.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-26 (bsc#1226027)
  * MFSA-RESERVE-2024-1193389 (bmo#1193389)
    Use-after-free in networking
  * MFSA-RESERVE-2024-1895086 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * MFSA-RESERVE-2024-1883693 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * MFSA-RESERVE-2024-1888695 (bmo#1888695)
    Sandboxed iframe were able to bypass sandbox restrictions to
    open a new window
  * MFSA-RESERVE-2024-1891234 (bmo#1891234)
    Bypass of file name restrictions during saving
  * MFSA-RESERVE-2024-1891319 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * MFSA-RESERVE-2024-1896555 (bmo#1896555)
    Memory Corruption in Text Fragments
  * MFSA-RESERVE-2024-2 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="440ab4d47fb8d6b106da36b59ad4c2cf18d39264007bcafa6e170450b35f8049" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="2785706ed159bd4a84889ab37e9879c68b9cb74d392040c9a1c767c725198f5e" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="ac60e564668ea51fb5d84baacd67bab08ff315d1dc707489d05400cd08601937" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="edfaa2767cdae9e9b162e73263517d8dc08317fc6db149703dab25f2de08640c" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="c72d621dda3b060679acc7ffd2858ebfa85d9f5039690432a6658b2139db9431" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="4af78d4e6abb584c16e73d7fc18ef4258d1ee0751e54bbc814ef879d09e0338f" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="115.12.0" rel="150200.8.163.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1718625600">- Mozilla Thunderbird 115.12
  * fixed: POP error messages from server were not displayed
    (bmo#1876431)
  * fixed: Some OpenPGP messages were incorrectly reported as
    being partially signed or encrypted (bmo#1886396)
  * fixed: Autocrypt header was missing from some encrypted
    messages due to case-sensitive email address matching
    (bmo#1896876)
  * fixed: "Convert to Table" dialog content was formatted
    incorrectly (bmo#1896252)
  * fixed: Opening Theme Settings reverted the current theme to
    the startup theme (bmo#1859271)
  * fixed: Security fixes
  MFSA 2024-28 (bsc#1226027)
  * CVE-2024-5702 (bmo#1193389)
    Use-after-free in networking
  * CVE-2024-5688 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * CVE-2024-5690 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * CVE-2024-5691 (bmo#1888695)
    Sandboxed iframes were able to bypass sandbox restrictions to
    open a new window
  * CVE-2024-5692 (bmo#1891234)
    Bypass of file name restrictions during saving
  * CVE-2024-5693 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * CVE-2024-5696 (bmo#1896555)
    Memory Corruption in Text Fragments
  * CVE-2024-5700 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="232f22c91f9550b3b2d049b1b04367650551c534bd9ffaf66473690162b4b5cf" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="115.12.0" rel="150200.8.163.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1718625600">- Mozilla Thunderbird 115.12
  * fixed: POP error messages from server were not displayed
    (bmo#1876431)
  * fixed: Some OpenPGP messages were incorrectly reported as
    being partially signed or encrypted (bmo#1886396)
  * fixed: Autocrypt header was missing from some encrypted
    messages due to case-sensitive email address matching
    (bmo#1896876)
  * fixed: "Convert to Table" dialog content was formatted
    incorrectly (bmo#1896252)
  * fixed: Opening Theme Settings reverted the current theme to
    the startup theme (bmo#1859271)
  * fixed: Security fixes
  MFSA 2024-28 (bsc#1226027)
  * CVE-2024-5702 (bmo#1193389)
    Use-after-free in networking
  * CVE-2024-5688 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * CVE-2024-5690 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * CVE-2024-5691 (bmo#1888695)
    Sandboxed iframes were able to bypass sandbox restrictions to
    open a new window
  * CVE-2024-5692 (bmo#1891234)
    Bypass of file name restrictions during saving
  * CVE-2024-5693 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * CVE-2024-5696 (bmo#1896555)
    Memory Corruption in Text Fragments
  * CVE-2024-5700 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="fef1f673a8f92d9e63713d45f6ba3f24f3ae6b0bde967ff4320defebae369c4f" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="115.12.0" rel="150200.8.163.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1718625600">- Mozilla Thunderbird 115.12
  * fixed: POP error messages from server were not displayed
    (bmo#1876431)
  * fixed: Some OpenPGP messages were incorrectly reported as
    being partially signed or encrypted (bmo#1886396)
  * fixed: Autocrypt header was missing from some encrypted
    messages due to case-sensitive email address matching
    (bmo#1896876)
  * fixed: "Convert to Table" dialog content was formatted
    incorrectly (bmo#1896252)
  * fixed: Opening Theme Settings reverted the current theme to
    the startup theme (bmo#1859271)
  * fixed: Security fixes
  MFSA 2024-28 (bsc#1226027)
  * CVE-2024-5702 (bmo#1193389)
    Use-after-free in networking
  * CVE-2024-5688 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * CVE-2024-5690 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * CVE-2024-5691 (bmo#1888695)
    Sandboxed iframes were able to bypass sandbox restrictions to
    open a new window
  * CVE-2024-5692 (bmo#1891234)
    Bypass of file name restrictions during saving
  * CVE-2024-5693 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * CVE-2024-5696 (bmo#1896555)
    Memory Corruption in Text Fragments
  * CVE-2024-5700 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="be7828a2e17adbf4d8dea4e64edb01d97368814e4b90f9aa74c19889cde42fea" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="115.12.0" rel="150200.8.163.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1718625600">- Mozilla Thunderbird 115.12
  * fixed: POP error messages from server were not displayed
    (bmo#1876431)
  * fixed: Some OpenPGP messages were incorrectly reported as
    being partially signed or encrypted (bmo#1886396)
  * fixed: Autocrypt header was missing from some encrypted
    messages due to case-sensitive email address matching
    (bmo#1896876)
  * fixed: "Convert to Table" dialog content was formatted
    incorrectly (bmo#1896252)
  * fixed: Opening Theme Settings reverted the current theme to
    the startup theme (bmo#1859271)
  * fixed: Security fixes
  MFSA 2024-28 (bsc#1226027)
  * CVE-2024-5702 (bmo#1193389)
    Use-after-free in networking
  * CVE-2024-5688 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * CVE-2024-5690 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * CVE-2024-5691 (bmo#1888695)
    Sandboxed iframes were able to bypass sandbox restrictions to
    open a new window
  * CVE-2024-5692 (bmo#1891234)
    Bypass of file name restrictions during saving
  * CVE-2024-5693 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * CVE-2024-5696 (bmo#1896555)
    Memory Corruption in Text Fragments
  * CVE-2024-5700 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="5a2ca8f2ea7bece457e36e5052e363111fda2f942e1a1fbc48a062ec4da8e2dc" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="115.12.0" rel="150200.8.163.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1718625600">- Mozilla Thunderbird 115.12
  * fixed: POP error messages from server were not displayed
    (bmo#1876431)
  * fixed: Some OpenPGP messages were incorrectly reported as
    being partially signed or encrypted (bmo#1886396)
  * fixed: Autocrypt header was missing from some encrypted
    messages due to case-sensitive email address matching
    (bmo#1896876)
  * fixed: "Convert to Table" dialog content was formatted
    incorrectly (bmo#1896252)
  * fixed: Opening Theme Settings reverted the current theme to
    the startup theme (bmo#1859271)
  * fixed: Security fixes
  MFSA 2024-28 (bsc#1226027)
  * CVE-2024-5702 (bmo#1193389)
    Use-after-free in networking
  * CVE-2024-5688 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * CVE-2024-5690 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * CVE-2024-5691 (bmo#1888695)
    Sandboxed iframes were able to bypass sandbox restrictions to
    open a new window
  * CVE-2024-5692 (bmo#1891234)
    Bypass of file name restrictions during saving
  * CVE-2024-5693 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * CVE-2024-5696 (bmo#1896555)
    Memory Corruption in Text Fragments
  * CVE-2024-5700 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="3f44fe92325e27326e5e5381e9793704c716bfa8f458b79bb0daae3a64c81036" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="c74846b309e7faeca7d7743a7f5ee0ce82732e25595a473db5bf587eca2d0388" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="64076a3397953ca826ab59864999dfff79de447bb7df77f46efaa56c922602ca" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="ad20d9314a9fe71c53998a8c7c5211ac74a4a5c2c13c1f02f2c324d28a114f61" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="94be601d129dc8970ec4b926b83e0e9ee911b2783aab87e43dedde4d6194a9c1" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="115.12.0" rel="150200.8.163.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1718625600">- Mozilla Thunderbird 115.12
  * fixed: POP error messages from server were not displayed
    (bmo#1876431)
  * fixed: Some OpenPGP messages were incorrectly reported as
    being partially signed or encrypted (bmo#1886396)
  * fixed: Autocrypt header was missing from some encrypted
    messages due to case-sensitive email address matching
    (bmo#1896876)
  * fixed: "Convert to Table" dialog content was formatted
    incorrectly (bmo#1896252)
  * fixed: Opening Theme Settings reverted the current theme to
    the startup theme (bmo#1859271)
  * fixed: Security fixes
  MFSA 2024-28 (bsc#1226027)
  * CVE-2024-5702 (bmo#1193389)
    Use-after-free in networking
  * CVE-2024-5688 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * CVE-2024-5690 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * CVE-2024-5691 (bmo#1888695)
    Sandboxed iframes were able to bypass sandbox restrictions to
    open a new window
  * CVE-2024-5692 (bmo#1891234)
    Bypass of file name restrictions during saving
  * CVE-2024-5693 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * CVE-2024-5696 (bmo#1896555)
    Memory Corruption in Text Fragments
  * CVE-2024-5700 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="523ab9217c8743ff8460286e27dd29ea35be4a651c5102e0474e14335de1a591" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="115.12.0" rel="150200.8.163.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1718625600">- Mozilla Thunderbird 115.12
  * fixed: POP error messages from server were not displayed
    (bmo#1876431)
  * fixed: Some OpenPGP messages were incorrectly reported as
    being partially signed or encrypted (bmo#1886396)
  * fixed: Autocrypt header was missing from some encrypted
    messages due to case-sensitive email address matching
    (bmo#1896876)
  * fixed: "Convert to Table" dialog content was formatted
    incorrectly (bmo#1896252)
  * fixed: Opening Theme Settings reverted the current theme to
    the startup theme (bmo#1859271)
  * fixed: Security fixes
  MFSA 2024-28 (bsc#1226027)
  * CVE-2024-5702 (bmo#1193389)
    Use-after-free in networking
  * CVE-2024-5688 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * CVE-2024-5690 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * CVE-2024-5691 (bmo#1888695)
    Sandboxed iframes were able to bypass sandbox restrictions to
    open a new window
  * CVE-2024-5692 (bmo#1891234)
    Bypass of file name restrictions during saving
  * CVE-2024-5693 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * CVE-2024-5696 (bmo#1896555)
    Memory Corruption in Text Fragments
  * CVE-2024-5700 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="fea3ba88a40979e4479b90fe92ce6b17307c4439a42a8bc056c7fbfa3ea80559" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="115.12.0" rel="150200.8.163.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1718625600">- Mozilla Thunderbird 115.12
  * fixed: POP error messages from server were not displayed
    (bmo#1876431)
  * fixed: Some OpenPGP messages were incorrectly reported as
    being partially signed or encrypted (bmo#1886396)
  * fixed: Autocrypt header was missing from some encrypted
    messages due to case-sensitive email address matching
    (bmo#1896876)
  * fixed: "Convert to Table" dialog content was formatted
    incorrectly (bmo#1896252)
  * fixed: Opening Theme Settings reverted the current theme to
    the startup theme (bmo#1859271)
  * fixed: Security fixes
  MFSA 2024-28 (bsc#1226027)
  * CVE-2024-5702 (bmo#1193389)
    Use-after-free in networking
  * CVE-2024-5688 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * CVE-2024-5690 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * CVE-2024-5691 (bmo#1888695)
    Sandboxed iframes were able to bypass sandbox restrictions to
    open a new window
  * CVE-2024-5692 (bmo#1891234)
    Bypass of file name restrictions during saving
  * CVE-2024-5693 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * CVE-2024-5696 (bmo#1896555)
    Memory Corruption in Text Fragments
  * CVE-2024-5700 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="02f4ab1bb8c0e8f81b3914efcc7f65af1478e03377dfe739391728d3d8aa7a0f" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="115.12.0" rel="150200.8.163.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1718625600">- Mozilla Thunderbird 115.12
  * fixed: POP error messages from server were not displayed
    (bmo#1876431)
  * fixed: Some OpenPGP messages were incorrectly reported as
    being partially signed or encrypted (bmo#1886396)
  * fixed: Autocrypt header was missing from some encrypted
    messages due to case-sensitive email address matching
    (bmo#1896876)
  * fixed: "Convert to Table" dialog content was formatted
    incorrectly (bmo#1896252)
  * fixed: Opening Theme Settings reverted the current theme to
    the startup theme (bmo#1859271)
  * fixed: Security fixes
  MFSA 2024-28 (bsc#1226027)
  * CVE-2024-5702 (bmo#1193389)
    Use-after-free in networking
  * CVE-2024-5688 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * CVE-2024-5690 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * CVE-2024-5691 (bmo#1888695)
    Sandboxed iframes were able to bypass sandbox restrictions to
    open a new window
  * CVE-2024-5692 (bmo#1891234)
    Bypass of file name restrictions during saving
  * CVE-2024-5693 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * CVE-2024-5696 (bmo#1896555)
    Memory Corruption in Text Fragments
  * CVE-2024-5700 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="410455ed2f22d520e132a09c5e0f65804672b4ba91db8c56f72dc37158a2ec81" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="3c2d5385fde8267598bfabbfd77c39c9839eb3b9cde31590ea27fedd3b896bbe" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="135596aeb4fc2f8ba38e4b3b088da3491f867bce10179a3f5101eb637800e33b" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="d8fb293e575a312d6ab96fcbca0cfc2c51dd12fe82bbb33c870adc29b98e787c" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="20a8cf32718ca23103e5f1c6c89465ff01ef430f36fe181ee0268ede5662aa60" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="115.12.0" rel="150200.8.163.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1718625600">- Mozilla Thunderbird 115.12
  * fixed: POP error messages from server were not displayed
    (bmo#1876431)
  * fixed: Some OpenPGP messages were incorrectly reported as
    being partially signed or encrypted (bmo#1886396)
  * fixed: Autocrypt header was missing from some encrypted
    messages due to case-sensitive email address matching
    (bmo#1896876)
  * fixed: "Convert to Table" dialog content was formatted
    incorrectly (bmo#1896252)
  * fixed: Opening Theme Settings reverted the current theme to
    the startup theme (bmo#1859271)
  * fixed: Security fixes
  MFSA 2024-28 (bsc#1226027)
  * CVE-2024-5702 (bmo#1193389)
    Use-after-free in networking
  * CVE-2024-5688 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * CVE-2024-5690 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * CVE-2024-5691 (bmo#1888695)
    Sandboxed iframes were able to bypass sandbox restrictions to
    open a new window
  * CVE-2024-5692 (bmo#1891234)
    Bypass of file name restrictions during saving
  * CVE-2024-5693 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * CVE-2024-5696 (bmo#1896555)
    Memory Corruption in Text Fragments
  * CVE-2024-5700 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="45fd419bb9d252fc163c9ac1e5bb181bddb4faeec255125a803c185dc72ba28f" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="115.12.0" rel="150200.8.163.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1718625600">- Mozilla Thunderbird 115.12
  * fixed: POP error messages from server were not displayed
    (bmo#1876431)
  * fixed: Some OpenPGP messages were incorrectly reported as
    being partially signed or encrypted (bmo#1886396)
  * fixed: Autocrypt header was missing from some encrypted
    messages due to case-sensitive email address matching
    (bmo#1896876)
  * fixed: "Convert to Table" dialog content was formatted
    incorrectly (bmo#1896252)
  * fixed: Opening Theme Settings reverted the current theme to
    the startup theme (bmo#1859271)
  * fixed: Security fixes
  MFSA 2024-28 (bsc#1226027)
  * CVE-2024-5702 (bmo#1193389)
    Use-after-free in networking
  * CVE-2024-5688 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * CVE-2024-5690 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * CVE-2024-5691 (bmo#1888695)
    Sandboxed iframes were able to bypass sandbox restrictions to
    open a new window
  * CVE-2024-5692 (bmo#1891234)
    Bypass of file name restrictions during saving
  * CVE-2024-5693 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * CVE-2024-5696 (bmo#1896555)
    Memory Corruption in Text Fragments
  * CVE-2024-5700 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="21c52ccf028c1c2ef5ebe87239f0bfb1b51110582d15b8633357946b2d78f651" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="115.12.0" rel="150200.8.163.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1718625600">- Mozilla Thunderbird 115.12
  * fixed: POP error messages from server were not displayed
    (bmo#1876431)
  * fixed: Some OpenPGP messages were incorrectly reported as
    being partially signed or encrypted (bmo#1886396)
  * fixed: Autocrypt header was missing from some encrypted
    messages due to case-sensitive email address matching
    (bmo#1896876)
  * fixed: "Convert to Table" dialog content was formatted
    incorrectly (bmo#1896252)
  * fixed: Opening Theme Settings reverted the current theme to
    the startup theme (bmo#1859271)
  * fixed: Security fixes
  MFSA 2024-28 (bsc#1226027)
  * CVE-2024-5702 (bmo#1193389)
    Use-after-free in networking
  * CVE-2024-5688 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * CVE-2024-5690 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * CVE-2024-5691 (bmo#1888695)
    Sandboxed iframes were able to bypass sandbox restrictions to
    open a new window
  * CVE-2024-5692 (bmo#1891234)
    Bypass of file name restrictions during saving
  * CVE-2024-5693 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * CVE-2024-5696 (bmo#1896555)
    Memory Corruption in Text Fragments
  * CVE-2024-5700 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="f4a640fd0acd0fbdfd627e6176a3274b8fbc584ef9a92db5020e61fa54e52530" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="115.12.0" rel="150200.8.163.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1718625600">- Mozilla Thunderbird 115.12
  * fixed: POP error messages from server were not displayed
    (bmo#1876431)
  * fixed: Some OpenPGP messages were incorrectly reported as
    being partially signed or encrypted (bmo#1886396)
  * fixed: Autocrypt header was missing from some encrypted
    messages due to case-sensitive email address matching
    (bmo#1896876)
  * fixed: "Convert to Table" dialog content was formatted
    incorrectly (bmo#1896252)
  * fixed: Opening Theme Settings reverted the current theme to
    the startup theme (bmo#1859271)
  * fixed: Security fixes
  MFSA 2024-28 (bsc#1226027)
  * CVE-2024-5702 (bmo#1193389)
    Use-after-free in networking
  * CVE-2024-5688 (bmo#1895086)
    Use-after-free in JavaScript object transplant
  * CVE-2024-5690 (bmo#1883693)
    External protocol handlers leaked by timing attack
  * CVE-2024-5691 (bmo#1888695)
    Sandboxed iframes were able to bypass sandbox restrictions to
    open a new window
  * CVE-2024-5692 (bmo#1891234)
    Bypass of file name restrictions during saving
  * CVE-2024-5693 (bmo#1891319)
    Cross-Origin Image leak via Offscreen Canvas
  * CVE-2024-5696 (bmo#1896555)
    Memory Corruption in Text Fragments
  * CVE-2024-5700 (bmo#1862809, bmo#1889355, bmo#1893388,
    bmo#1895123)
    Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12,
    and Thunderbird 115.12</changelog>
</package>
<package pkgid="edf10d74afe9a5808353fcd4a700aca72b8fc9574991766c0942c47c7ec872d7" name="PackageKit" arch="aarch64">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="242a35e782f1c2cf52764cc47c40b35ff9027386edcb75a993cacdd18ea88e05" name="PackageKit" arch="ppc64le">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="61e8cb31f92e27f52e2a8514eb18ef46f997632c80a862a6d3800d57758f22ff" name="PackageKit" arch="s390x">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="91558d9c65dabb869a2290172333fd457dd4ba782830cf3f79442c763bcc3ed2" name="PackageKit" arch="src">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="7cda6daa85e46ec139dd7abe310c6cd157c3d29c8adee4600d6a0bd827937935" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="f8d88ef5fb7c3013da12afe46633b72f0f023a13978fec668fb303c95947e9c6" name="PackageKit-backend-dnf" arch="aarch64">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="3f7c48731c1e413d112f0f414915fa8ce493414a9b534804c1e805498290d73b" name="PackageKit-backend-dnf" arch="ppc64le">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="e6eb0b2a2a65c7226a5995857f43f45a4d555f4f65f11f408392b620228eb34b" name="PackageKit-backend-dnf" arch="s390x">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="34ebac62adc360720ff2a82031a8d24ce7bde64091a30ca8f52c0ce578be5f54" name="PackageKit-backend-dnf" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="3d96880e305524eab23bf121b65744b2eed11202febddc85482248b831e1ae71" name="PackageKit-backend-zypp" arch="aarch64">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="7874859d99e0824523e8d58e55574183b924c058591ca584490c2baeb01cc893" name="PackageKit-backend-zypp" arch="ppc64le">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="60456ba93f333cd868a72e31ca65a9ffbc389495bcdf25c7186ad47e08cf2ffd" name="PackageKit-backend-zypp" arch="s390x">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="0eae9ae8b0453de6f76d626325938f43da051b58ff236c6570f00f7b8c3fe726" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="ec3e8fc5819afec02382e909ab97af5f842ed23d4acff634c2dbe3d6e82b4b87" name="PackageKit-branding-SLE" arch="noarch">
  <version epoch="0" ver="12.0" rel="150600.22.2.4"/>
  <changelog author="coolo@suse.com" date="1358164800">- Update PackageKit-branding-vendor.patch: Disable ScanDesktop
  plugin, it takes forever at least on first startup:
  - ScanDesktopFiles=false</changelog>
  <changelog author="dimstar@opensuse.org" date="1358337600">- Rebase PackageKit-branding-default-config.patch against
  PackageKit 0.8.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1362398400">- Disable WritePreparedUpdates: we do currently not support offline
  updates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1378728000">- Bump version to 13.1 for next version of openSUSE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1380888000">- Do not package %{_sysconfdir}/PackageKit/CommandNotFound.conf, as
  it unbranded and CNF is currently disabled in PackageKit.</changelog>
  <changelog author="dimstar@opensuse.org" date="1387800000">- Rebase PackageKit-branding-vendor.patch and
  PackageKit-branding-default-config.patch for PackageKit 0.8.14.</changelog>
  <changelog author="sreeves@suse.com" date="1402056000">- Rename to PackageKit-branding-SLE. bnc#881472</changelog>
  <changelog author="fcrozat@suse.com" date="1404475200">- Update PackageKit-branding-vendor.patch to disable codec redirect
  webpage for now (FATE#316921)</changelog>
  <changelog author="dimstar@opensuse.org" date="1413892800">- Rebase PackageKit-branding-default-config.patch for
  PackageKit 1.0.1.</changelog>
  <changelog author="yfjiang@suse.com" date="1705492800">- Rebase PackageKit-branding-vendor.patch for PacakgeKit 1.2.8.</changelog>
</package>
<package pkgid="b049d40bba76bf87f04e17a3a47ec44e52d191c5266812bfc5802ddeb75154cb" name="PackageKit-branding-SLE" arch="src">
  <version epoch="0" ver="12.0" rel="150600.22.2.4"/>
  <changelog author="ro@suse.de" date="1273752000">- rename changes template to changes.in again</changelog>
  <changelog author="vuntz@opensuse.org" date="1286366400">- Update so that we can ignore some files from /etc/PackageKit that
  should not get branded, like /etc/PackageKit/events. This fixes
  the build.</changelog>
  <changelog author="vuntz@opensuse.org" date="1286539200">- Bump version to 11.4.</changelog>
  <changelog author="vuntz@opensuse.org" date="1298030400">- Add PackageKit-branding-ZYpp.conf that gets installed as
  /etc/PackageKit/ZYpp.conf: this can be used to change the
  PackgeKit behavior when handling updates.</changelog>
  <changelog author="vuntz@opensuse.org" date="1304683200">- Package %{_sysconfdir}/PackageKit/CommandNotFound.conf again, as
  we build the command-not-found PackageKit utility again.</changelog>
  <changelog author="vuntz@opensuse.org" date="1309953600">- Bump version to 12.1.
- Add a Requires for PackageKit, since the branding package is
  useless without it.
- Update summary and description.
- Add Url tag.</changelog>
  <changelog author="vuntz@opensuse.org" date="1318507200">- Remove %{release} from the PackageKit versioned Requires, to not
  have to rebuild this package each time PackageKit rebuilds to
  keep it installable.</changelog>
  <changelog author="vuntz@opensuse.org" date="1331726400">- Rebase PackageKit-branding-vendor.patch.</changelog>
  <changelog author="vuntz@opensuse.org" date="1337774400">- Bump version to 12.2, to prepare for next version of openSUSE.</changelog>
  <changelog author="aj@suse.de" date="1357732800">- Bump version to 12.3 for next version of openSUSE</changelog>
  <changelog author="coolo@suse.com" date="1358164800">- Update PackageKit-branding-vendor.patch: Disable ScanDesktop
  plugin, it takes forever at least on first startup:
  - ScanDesktopFiles=false</changelog>
  <changelog author="dimstar@opensuse.org" date="1358337600">- Rebase PackageKit-branding-default-config.patch against
  PackageKit 0.8.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1362398400">- Disable WritePreparedUpdates: we do currently not support offline
  updates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1378728000">- Bump version to 13.1 for next version of openSUSE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1380888000">- Do not package %{_sysconfdir}/PackageKit/CommandNotFound.conf, as
  it unbranded and CNF is currently disabled in PackageKit.</changelog>
  <changelog author="dimstar@opensuse.org" date="1387800000">- Rebase PackageKit-branding-vendor.patch and
  PackageKit-branding-default-config.patch for PackageKit 0.8.14.</changelog>
  <changelog author="sreeves@suse.com" date="1402056000">- Rename to PackageKit-branding-SLE. bnc#881472</changelog>
  <changelog author="fcrozat@suse.com" date="1404475200">- Update PackageKit-branding-vendor.patch to disable codec redirect
  webpage for now (FATE#316921)</changelog>
  <changelog author="dimstar@opensuse.org" date="1413892800">- Rebase PackageKit-branding-default-config.patch for
  PackageKit 1.0.1.</changelog>
  <changelog author="yfjiang@suse.com" date="1705492800">- Rebase PackageKit-branding-vendor.patch for PacakgeKit 1.2.8.</changelog>
</package>
<package pkgid="d15beecd3c85e770feaacd93ce2174b210c61b08fca99f790ad457d7cea407ae" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="93aa5ac1a52e19f24b3ba71b58dd8943c504ca19d5ef5aa447745ee753be5c53" name="PackageKit-devel" arch="aarch64">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="9654f62636b4f189a23539fa922b4f94e96613d002a9f3b5eda6b41f02555cd0" name="PackageKit-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="c6afa8b6351ea9eaff326e083930d36d37657d4b7482ebfbb45199cc1f5b0631" name="PackageKit-devel" arch="s390x">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="2630835d315a24e76c261b2e933bd81b39ed676f891ab12da31c4e4bdfc6494c" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="2f6af57ea5d35fc77a8a464678c07f39792a9787851015f0991b660f1ec94470" name="PackageKit-gstreamer-plugin" arch="aarch64">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="5da541313a499bcacb0fff0b1888376202ba62a5c9618139c02afa4cd2c0a7df" name="PackageKit-gstreamer-plugin" arch="ppc64le">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="010f248eb2b5112b310ad89c198831786c67bec91338b9531e05797e6c931b0d" name="PackageKit-gstreamer-plugin" arch="s390x">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="2a20315555e9d17e8f11a27fa89c9fbb34513a103ae1f89a475abbaac0e63714" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="fe8e3d969931a3d3d0d9f503725b744aaaa2b8511b619ef156e56e67125c2330" name="PackageKit-gtk3-module" arch="aarch64">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="36bda4ed9a819db6fda4ee05843dd9a333f4730f356ba379086528c2cc9d305d" name="PackageKit-gtk3-module" arch="ppc64le">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="89e2a3fbb620953cc14ca8db100589940d17c8e4893adb8b1d9a5bc7791c91cb" name="PackageKit-gtk3-module" arch="s390x">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="8da17828bd0a5c20a2e444685305afe476d727fe8201bb115097144854d36164" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="b730553ee8bc61cb24b5a94f34233695f5ef0fc1aedd32fdf7caece6e4d2b0cf" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.2.8" rel="150600.4.2.7"/>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653048000">- Update to version 1.2.5:
  + Backends:
  - dnf:
    . Add support for autoremove flag when removing packages.
    . Searches by name and package details should be case
    insensitive.
    . Update appstream xml files if dnf_sack_add_repos() does
    the download.
  - zypp:
    . Add -std=c++1z cpp flags.
    . Fix crash when search string is NULL.
    . Fix package installation using undefined data.
  - Changes to alpm, apttcc, nix, and slack.
  + Bugfixes:
  - Install offline-update enablement symlink if Meson is new
    enough.
  - Move Wants= line for network-online.target.
  - Add flags to D-Bus offline invoking methods.
  - Properly handle allow-reinstall flag for installations.
  - Provide better error message if trying to install an
    installed package.
  - Wait until online to activate systemd service.
- Drop 505.patch, PackageKit-zypp-c++17.patch, and
  PackageKit-zypp-fix-crash-with-empty-search-string.patch: fixed
  upstream.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201347)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
</package>
<package pkgid="cfde0143f2b5d71dc8a2aa000c2b43107e788a3d475406319517f31839a174c2" name="SAPHanaSR" arch="noarch">
  <version epoch="0" ver="0.162.4" rel="150000.4.44.1"/>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1698926400">- Version bump to 0.162.2
  * inside SAPHanaSR-hookHelper use the full path for the cibadmin
    command to support non root users in special user environments
    (bsc#1216484)
  * if the SAPHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaTopology.7
    susCostOpt.py.7
    SAPHanaSR-monitor.8
    SAPHanaSR-showAttr.8
  * add improvements from SAP to the RA scripts, part II
    (jsc#PED-1739, jsc#PED-2608)</changelog>
  <changelog author="abriel@suse.com" date="1706529600">- Version bump to 0.162.3
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * fix scope of variable 'site' to be global
    (bsc#1219194)
  * susChkSrv.py - relocate function logTimestamp()
  * update man pages:
    SAPHanaSR.7
    ocf_suse_SAPHana.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 0.162.4
  * unify global.ini examples
  * add demo script SAPHanaSR-upgrade-to-angi-demo
  * update man pages:
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-upgrade-to-angi-demo.8
    SAPHanaSR.py.7</changelog>
</package>
<package pkgid="43eb6fb753bd1990cc1f97c4964928053e1fc1a527de5a44078e979f3f2e6071" name="SAPHanaSR" arch="src">
  <version epoch="0" ver="0.162.4" rel="150000.4.44.1"/>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1698926400">- Version bump to 0.162.2
  * inside SAPHanaSR-hookHelper use the full path for the cibadmin
    command to support non root users in special user environments
    (bsc#1216484)
  * if the SAPHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaTopology.7
    susCostOpt.py.7
    SAPHanaSR-monitor.8
    SAPHanaSR-showAttr.8
  * add improvements from SAP to the RA scripts, part II
    (jsc#PED-1739, jsc#PED-2608)</changelog>
  <changelog author="abriel@suse.com" date="1706529600">- Version bump to 0.162.3
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * fix scope of variable 'site' to be global
    (bsc#1219194)
  * susChkSrv.py - relocate function logTimestamp()
  * update man pages:
    SAPHanaSR.7
    ocf_suse_SAPHana.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 0.162.4
  * unify global.ini examples
  * add demo script SAPHanaSR-upgrade-to-angi-demo
  * update man pages:
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-upgrade-to-angi-demo.8
    SAPHanaSR.py.7</changelog>
</package>
<package pkgid="ad0a395c14e26b54b0ccd9e372f7c00c24b9c7606a09ce483c27ab2d402eb83c" name="SAPHanaSR-ScaleOut" arch="noarch">
  <version epoch="0" ver="0.185.3" rel="150000.45.1"/>
  <changelog author="imanyugin@suse.com" date="1465819200">- Initial technical preview release. fate#318793</changelog>
  <changelog author="imanyugin@suse.com" date="1468497600">- Version 0.161.1
- Added a package conflict for SAPHanaSR, bsc#989162
- Restructure package and the .spec file</changelog>
  <changelog author="imanyugin@suse.com" date="1522756800">- Version 0.163.0
- Fix bsc#1045603: Update man pages
- Fix bsc#1045536: SAPHanaSR-ScaleOut missing update to use SLES python
- Fix bsc#1086545: minor typos in package description and man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1525780800">- Fix bsc#1092331: SAPHanaSR: SAPHanaSR-showAttr fails to open an archived cib file
- Fix bsc#1091988:SAPHanaSR-ScaleOut SAPHanaSR-monitor depends on package not existing in SLES
- SAPHanaSR-showAttr, SAPHanaSR-monitor moved to /usr/sbin to match the file layout in SAPHanaSR-ScaleUp</changelog>
  <changelog author="imanyugin@suse.com" date="1530014400">- Version 0.163.1</changelog>
  <changelog author="clanig@suse.de" date="1536753600">- Version 0.163.2
- Fix bsc#1098979: SAPHanaSR-ScaleOut SAPHanaTopology and
  SAPHanaController allowing virtual host names</changelog>
  <changelog author="abriel@suse.com" date="1573473600">- change version to 0.164.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)
- Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- clean up package, add checks, correct typos</changelog>
  <changelog author="abriel@suse.com" date="1589457600">- let the SAPHanaSR-ScaleOut-doc package conflict with the
  SAPHanaSR-doc package
  (bsc#1157685)</changelog>
  <changelog author="abriel@suse.com" date="1600689600">- PROMOTED/PROMOTED Fix - The PROMOTED/PROMOTED values happened
  after the main tenance procedure and the refresh of the resource
  did not fixed that
  (bsc#1176330)
- Improved SCORING and logging
  Score of secondary in takeover phase increased from 122 to 145 to
  avoid promotion of former primary masternameserver candidates
  (bsc#1174610)
- Fixed typos and improved descriptions in comments
- Change default timeouts and intervals to match the official
  recommendations</changelog>
  <changelog author="abriel@suse.com" date="1604491200">- change version to 0.164.1
- adapt man page SAPHanaSR-showAttr(8) and the README
  (bsc#1144729)</changelog>
  <changelog author="abriel@suse.com" date="1614859200">- change version to 0.164.2
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- add return codes for saphana_stop and saphana_StopSystem
  (bsc#1182115)
- man page SAPhanaSR-ScaleOut minor mistakes
  (bsc#1144442)</changelog>
  <changelog author="abriel@suse.com" date="1627905600">- change version to 0.180.1
- Multi-target SAP HANA Scale-out replication support.
  Extent the SAP HANA ressource agents from single replication
  automation to multi replication automation, which means
  adding multi-target support (srHook - SAPHanaSrMultiTarget.py)
  /usr/sbin/SAPHanaSR-manageAttr - Add a helper tool to support the
  customer during the update from a single replication automation
  to multi replication automation.
  (jsc#SLE-17452, jsc#SLE-20081)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop' in
  the cluster. We will use 95% of this action timeouts to calculate
  the new resource start and stop timeout for the 'WaitforStarted'
  and 'WaitforStopped' functions. If the new, calculated timeout
  value is less than '3600', it will be set to '3600', so that we
  do not decrease this timeout by accident in currently running
  clusters
  (bsc#1182545)
- improve handling of return codes in saphana_stopSystem and
  saphana_stop function.
  (bsc#1182115)
- If the cluster is down during a SR change event, these events
  need special care. They need to pick-up separately to not get
  lost.
- integrate man pages back to the base package SAPHanaSR-ScaleOut.
  The doc package SAPHanaSR-ScaleOut-doc will still exists, but
  only contain the file 'SAPHanaSR-Setup-Guide.pdf'
- During a SR takeover there may be a small time frame where the
  srHook gets a state change from the API with an empty site name.
  This results in a mis-configuration of the cluster. So log the
  occurrence of an empty site name, but do not generate bad
  formatted cluster attribute name.
  (analog to ScaleUp - bsc#1173581)
- add SAPHanaSR-call-monitor
- handle 'leftover instances'
  if HANA is configured to have only one master name server, but
  no additional master name server candidates, there may be the
  situation, where the master name server died and so the landscape
  has no active name server anymore.
  But there are other instances running with active communication
  channels. To prevent data corruption or operations on outdated
  data, we identify and stop these 'leftover' instances.
- add workaround for 'sapcontrol -function WaitforStopped'
  terminating to early.
  If the master name server dies and does not have a failover
  candidate but there are still running worker nodes the command
  'sapcontrol -function WaitforStopped' terminates to early and
  does not wait till all the remaining worker nodes are down.
  So the resource agent needs to wait during his 'stopSystem'
  function till the last "partial" node is down before returning
  a result to the cluster.
  (bsc#1196650)
- manual page updates:
  SAPHanaSR-ScaleOut.7 (bsc#1144442)
  SAPHanaSR-showAttr.8 (bsc#1144312)
  and others</changelog>
  <changelog author="abriel@suse.com" date="1641816000">- change version to 0.181.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189532, bsc#1189533)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)
- add switch 'cib_access' to the SAPHanaSrMultiTarget hook to give
  control over the hook runtime.
  Default is 'all-on' which means there are 3 cib calls performed
  inside the hook script.
  Changing the value of 'cib_access' inside the global.ini file to
  'site-on' to perform the absolute minimum cib calls (only one)
  (bsc#1189540)</changelog>
  <changelog author="abriel@suse.com" date="1669723200">- Version bump to 0.184.1
  * add new HA/DR provider hook susChkSrv supporting a fast-dying
    indexserver
    (jsc#PED-1241, jsc#PED-1240)
  * add new HA/DR provider hook susTkOver for blocking manual
    takeovers
    (jsc#SLE-16347)
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix SAPHanaSR-replay-archive to handle hb_report archives again
    (bsc#1198897)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * add lost-nameserver-slave handling to SAPHanaTopology, to avoid
    toggeling SAPHanaController resource, if all nameserver-masters
    got lost.
    SAPHanaController keeps started, if WAITING4NODES event needs
    to be processed. This only keeps the resource "started".
    The SAP HANA instance will only be started, if enough nodes are
    available to fulfill the needs of the SAP HANA landscape.
  * add new tool SAPHanaSR-manageProvider to show, add and delete
    HA/DR provider sections in the global.ini of SAP HANA.
  * changes to the demote_clone function of the resource agent:
    if the role is '*:shtdown:shtdown:shtdown' (topology agent run
    into timeouts) the function fail with rc=1, to get the managed
    resource stopped
    changes to the stop_clone function of the topology agent:
    call landscapeHostConfiguration.py and set the roles as they
    were reported. If the command timed out, set the role to
    '*:shtdown:shtdown:shtdown' and return 1 to get the node
    fenced.
    The used timeout for the landscapeHostConfiguration.py call can
    be configured by the cluster action timeout, if needed. It will
    be 50% of the action timeout or the minimum of 300s.
    (bsc#1198127)
  * SAPHanaSRTools.pm: shows terminate node attribute too
  * change SAPHanaSR-manageAttr to support the different behaviour
    of 'crmadmin -qD' in different pacemaker versions
    (bsc#1200969)
  * fix HANA_CALL function to support MCOS environments again
    (bsc#1198780)
  * correct the order constraint in man page
    ocf_suse_SAPHanaTopology.7
    (bsc#1197239)</changelog>
  <changelog author="abriel@suse.com" date="1689249600">- Version bump to 0.185.0
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * fix the path for the HA/DR provider hook in the global.ini
    examples to be useful
    (bsc#1210573)
  * update man pages:
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSrMultiTarget.py.7
    SAPHanaSR.py.7
    SAPHanaSR-monitor.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-manageAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1692964800">- Version bump to 0.185.1
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * modify /tmp full fix
    (bsc#1210728)
  * update man pages:
    SAPHanaSR-ScaleOut.7
  * add improvements from SAP to the RA scripts, part II
    (jsc#PED-1739, jsc#PED-2608)</changelog>
  <changelog author="abriel@suse.com" date="1702468800">- Version bump to 0.185.2
  * fix cluster state in SAPHanaSR-manageAttr by supporting the
    different behaviour of 'crmadmin -q -S' in different pacemaker
    versions
    (bsc#1217830)
  * inside SAPHanaSR-hookHelper use the full path for the cibadmin
    command to support non root users in special user environments
    (bsc#1216484)
  * if the SAPHanaSrMultiTarget hook has successfully reported a
    SR event to the cluster a still existing fall-back state file
    will be removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * update man pages:
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaController.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 0.185.3
  * Fix the hexdump log for empty node states
  * Fix exception handling in function 'logTimestamp' of HA/DR
    provider SAPHanaSrMultiTarget.py (bsc#1218901)
  * update man pages:
    SAPHanaSR-ScaleOut.7
    SAPHanaSR.py.7
    SAPHanaSrMultiTarget.py.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-showAttr.8
    SAPHanaSR-manageProvider.8</changelog>
</package>
<package pkgid="c31b31fa0453ed8c11df97e3b2e756a396ea1878e24029248893af5f37fd6a22" name="SAPHanaSR-ScaleOut" arch="src">
  <version epoch="0" ver="0.185.3" rel="150000.45.1"/>
  <changelog author="imanyugin@suse.com" date="1465819200">- Initial technical preview release. fate#318793</changelog>
  <changelog author="imanyugin@suse.com" date="1468497600">- Version 0.161.1
- Added a package conflict for SAPHanaSR, bsc#989162
- Restructure package and the .spec file</changelog>
  <changelog author="imanyugin@suse.com" date="1522756800">- Version 0.163.0
- Fix bsc#1045603: Update man pages
- Fix bsc#1045536: SAPHanaSR-ScaleOut missing update to use SLES python
- Fix bsc#1086545: minor typos in package description and man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1525780800">- Fix bsc#1092331: SAPHanaSR: SAPHanaSR-showAttr fails to open an archived cib file
- Fix bsc#1091988:SAPHanaSR-ScaleOut SAPHanaSR-monitor depends on package not existing in SLES
- SAPHanaSR-showAttr, SAPHanaSR-monitor moved to /usr/sbin to match the file layout in SAPHanaSR-ScaleUp</changelog>
  <changelog author="imanyugin@suse.com" date="1530014400">- Version 0.163.1</changelog>
  <changelog author="clanig@suse.de" date="1536753600">- Version 0.163.2
- Fix bsc#1098979: SAPHanaSR-ScaleOut SAPHanaTopology and
  SAPHanaController allowing virtual host names</changelog>
  <changelog author="abriel@suse.com" date="1573473600">- change version to 0.164.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)
- Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- clean up package, add checks, correct typos</changelog>
  <changelog author="abriel@suse.com" date="1589457600">- let the SAPHanaSR-ScaleOut-doc package conflict with the
  SAPHanaSR-doc package
  (bsc#1157685)</changelog>
  <changelog author="abriel@suse.com" date="1600689600">- PROMOTED/PROMOTED Fix - The PROMOTED/PROMOTED values happened
  after the main tenance procedure and the refresh of the resource
  did not fixed that
  (bsc#1176330)
- Improved SCORING and logging
  Score of secondary in takeover phase increased from 122 to 145 to
  avoid promotion of former primary masternameserver candidates
  (bsc#1174610)
- Fixed typos and improved descriptions in comments
- Change default timeouts and intervals to match the official
  recommendations</changelog>
  <changelog author="abriel@suse.com" date="1604491200">- change version to 0.164.1
- adapt man page SAPHanaSR-showAttr(8) and the README
  (bsc#1144729)</changelog>
  <changelog author="abriel@suse.com" date="1614859200">- change version to 0.164.2
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- add return codes for saphana_stop and saphana_StopSystem
  (bsc#1182115)
- man page SAPhanaSR-ScaleOut minor mistakes
  (bsc#1144442)</changelog>
  <changelog author="abriel@suse.com" date="1627905600">- change version to 0.180.1
- Multi-target SAP HANA Scale-out replication support.
  Extent the SAP HANA ressource agents from single replication
  automation to multi replication automation, which means
  adding multi-target support (srHook - SAPHanaSrMultiTarget.py)
  /usr/sbin/SAPHanaSR-manageAttr - Add a helper tool to support the
  customer during the update from a single replication automation
  to multi replication automation.
  (jsc#SLE-17452, jsc#SLE-20081)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop' in
  the cluster. We will use 95% of this action timeouts to calculate
  the new resource start and stop timeout for the 'WaitforStarted'
  and 'WaitforStopped' functions. If the new, calculated timeout
  value is less than '3600', it will be set to '3600', so that we
  do not decrease this timeout by accident in currently running
  clusters
  (bsc#1182545)
- improve handling of return codes in saphana_stopSystem and
  saphana_stop function.
  (bsc#1182115)
- If the cluster is down during a SR change event, these events
  need special care. They need to pick-up separately to not get
  lost.
- integrate man pages back to the base package SAPHanaSR-ScaleOut.
  The doc package SAPHanaSR-ScaleOut-doc will still exists, but
  only contain the file 'SAPHanaSR-Setup-Guide.pdf'
- During a SR takeover there may be a small time frame where the
  srHook gets a state change from the API with an empty site name.
  This results in a mis-configuration of the cluster. So log the
  occurrence of an empty site name, but do not generate bad
  formatted cluster attribute name.
  (analog to ScaleUp - bsc#1173581)
- add SAPHanaSR-call-monitor
- handle 'leftover instances'
  if HANA is configured to have only one master name server, but
  no additional master name server candidates, there may be the
  situation, where the master name server died and so the landscape
  has no active name server anymore.
  But there are other instances running with active communication
  channels. To prevent data corruption or operations on outdated
  data, we identify and stop these 'leftover' instances.
- add workaround for 'sapcontrol -function WaitforStopped'
  terminating to early.
  If the master name server dies and does not have a failover
  candidate but there are still running worker nodes the command
  'sapcontrol -function WaitforStopped' terminates to early and
  does not wait till all the remaining worker nodes are down.
  So the resource agent needs to wait during his 'stopSystem'
  function till the last "partial" node is down before returning
  a result to the cluster.
  (bsc#1196650)
- manual page updates:
  SAPHanaSR-ScaleOut.7 (bsc#1144442)
  SAPHanaSR-showAttr.8 (bsc#1144312)
  and others</changelog>
  <changelog author="abriel@suse.com" date="1641816000">- change version to 0.181.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189532, bsc#1189533)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)
- add switch 'cib_access' to the SAPHanaSrMultiTarget hook to give
  control over the hook runtime.
  Default is 'all-on' which means there are 3 cib calls performed
  inside the hook script.
  Changing the value of 'cib_access' inside the global.ini file to
  'site-on' to perform the absolute minimum cib calls (only one)
  (bsc#1189540)</changelog>
  <changelog author="abriel@suse.com" date="1669723200">- Version bump to 0.184.1
  * add new HA/DR provider hook susChkSrv supporting a fast-dying
    indexserver
    (jsc#PED-1241, jsc#PED-1240)
  * add new HA/DR provider hook susTkOver for blocking manual
    takeovers
    (jsc#SLE-16347)
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix SAPHanaSR-replay-archive to handle hb_report archives again
    (bsc#1198897)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * add lost-nameserver-slave handling to SAPHanaTopology, to avoid
    toggeling SAPHanaController resource, if all nameserver-masters
    got lost.
    SAPHanaController keeps started, if WAITING4NODES event needs
    to be processed. This only keeps the resource "started".
    The SAP HANA instance will only be started, if enough nodes are
    available to fulfill the needs of the SAP HANA landscape.
  * add new tool SAPHanaSR-manageProvider to show, add and delete
    HA/DR provider sections in the global.ini of SAP HANA.
  * changes to the demote_clone function of the resource agent:
    if the role is '*:shtdown:shtdown:shtdown' (topology agent run
    into timeouts) the function fail with rc=1, to get the managed
    resource stopped
    changes to the stop_clone function of the topology agent:
    call landscapeHostConfiguration.py and set the roles as they
    were reported. If the command timed out, set the role to
    '*:shtdown:shtdown:shtdown' and return 1 to get the node
    fenced.
    The used timeout for the landscapeHostConfiguration.py call can
    be configured by the cluster action timeout, if needed. It will
    be 50% of the action timeout or the minimum of 300s.
    (bsc#1198127)
  * SAPHanaSRTools.pm: shows terminate node attribute too
  * change SAPHanaSR-manageAttr to support the different behaviour
    of 'crmadmin -qD' in different pacemaker versions
    (bsc#1200969)
  * fix HANA_CALL function to support MCOS environments again
    (bsc#1198780)
  * correct the order constraint in man page
    ocf_suse_SAPHanaTopology.7
    (bsc#1197239)</changelog>
  <changelog author="abriel@suse.com" date="1689249600">- Version bump to 0.185.0
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * fix the path for the HA/DR provider hook in the global.ini
    examples to be useful
    (bsc#1210573)
  * update man pages:
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSrMultiTarget.py.7
    SAPHanaSR.py.7
    SAPHanaSR-monitor.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-manageAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1692964800">- Version bump to 0.185.1
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * modify /tmp full fix
    (bsc#1210728)
  * update man pages:
    SAPHanaSR-ScaleOut.7
  * add improvements from SAP to the RA scripts, part II
    (jsc#PED-1739, jsc#PED-2608)</changelog>
  <changelog author="abriel@suse.com" date="1702468800">- Version bump to 0.185.2
  * fix cluster state in SAPHanaSR-manageAttr by supporting the
    different behaviour of 'crmadmin -q -S' in different pacemaker
    versions
    (bsc#1217830)
  * inside SAPHanaSR-hookHelper use the full path for the cibadmin
    command to support non root users in special user environments
    (bsc#1216484)
  * if the SAPHanaSrMultiTarget hook has successfully reported a
    SR event to the cluster a still existing fall-back state file
    will be removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * update man pages:
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaController.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 0.185.3
  * Fix the hexdump log for empty node states
  * Fix exception handling in function 'logTimestamp' of HA/DR
    provider SAPHanaSrMultiTarget.py (bsc#1218901)
  * update man pages:
    SAPHanaSR-ScaleOut.7
    SAPHanaSR.py.7
    SAPHanaSrMultiTarget.py.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-showAttr.8
    SAPHanaSR-manageProvider.8</changelog>
</package>
<package pkgid="d0f1804ce5c643f5638be76e4be4d3a44e9abce91b5b443d94637d1b8f0fd990" name="SAPHanaSR-ScaleOut-doc" arch="noarch">
  <version epoch="0" ver="0.185.3" rel="150000.45.1"/>
  <changelog author="imanyugin@suse.com" date="1465819200">- Initial technical preview release. fate#318793</changelog>
  <changelog author="imanyugin@suse.com" date="1468497600">- Version 0.161.1
- Added a package conflict for SAPHanaSR, bsc#989162
- Restructure package and the .spec file</changelog>
  <changelog author="imanyugin@suse.com" date="1522756800">- Version 0.163.0
- Fix bsc#1045603: Update man pages
- Fix bsc#1045536: SAPHanaSR-ScaleOut missing update to use SLES python
- Fix bsc#1086545: minor typos in package description and man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1525780800">- Fix bsc#1092331: SAPHanaSR: SAPHanaSR-showAttr fails to open an archived cib file
- Fix bsc#1091988:SAPHanaSR-ScaleOut SAPHanaSR-monitor depends on package not existing in SLES
- SAPHanaSR-showAttr, SAPHanaSR-monitor moved to /usr/sbin to match the file layout in SAPHanaSR-ScaleUp</changelog>
  <changelog author="imanyugin@suse.com" date="1530014400">- Version 0.163.1</changelog>
  <changelog author="clanig@suse.de" date="1536753600">- Version 0.163.2
- Fix bsc#1098979: SAPHanaSR-ScaleOut SAPHanaTopology and
  SAPHanaController allowing virtual host names</changelog>
  <changelog author="abriel@suse.com" date="1573473600">- change version to 0.164.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)
- Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- clean up package, add checks, correct typos</changelog>
  <changelog author="abriel@suse.com" date="1589457600">- let the SAPHanaSR-ScaleOut-doc package conflict with the
  SAPHanaSR-doc package
  (bsc#1157685)</changelog>
  <changelog author="abriel@suse.com" date="1600689600">- PROMOTED/PROMOTED Fix - The PROMOTED/PROMOTED values happened
  after the main tenance procedure and the refresh of the resource
  did not fixed that
  (bsc#1176330)
- Improved SCORING and logging
  Score of secondary in takeover phase increased from 122 to 145 to
  avoid promotion of former primary masternameserver candidates
  (bsc#1174610)
- Fixed typos and improved descriptions in comments
- Change default timeouts and intervals to match the official
  recommendations</changelog>
  <changelog author="abriel@suse.com" date="1604491200">- change version to 0.164.1
- adapt man page SAPHanaSR-showAttr(8) and the README
  (bsc#1144729)</changelog>
  <changelog author="abriel@suse.com" date="1614859200">- change version to 0.164.2
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- add return codes for saphana_stop and saphana_StopSystem
  (bsc#1182115)
- man page SAPhanaSR-ScaleOut minor mistakes
  (bsc#1144442)</changelog>
  <changelog author="abriel@suse.com" date="1627905600">- change version to 0.180.1
- Multi-target SAP HANA Scale-out replication support.
  Extent the SAP HANA ressource agents from single replication
  automation to multi replication automation, which means
  adding multi-target support (srHook - SAPHanaSrMultiTarget.py)
  /usr/sbin/SAPHanaSR-manageAttr - Add a helper tool to support the
  customer during the update from a single replication automation
  to multi replication automation.
  (jsc#SLE-17452, jsc#SLE-20081)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop' in
  the cluster. We will use 95% of this action timeouts to calculate
  the new resource start and stop timeout for the 'WaitforStarted'
  and 'WaitforStopped' functions. If the new, calculated timeout
  value is less than '3600', it will be set to '3600', so that we
  do not decrease this timeout by accident in currently running
  clusters
  (bsc#1182545)
- improve handling of return codes in saphana_stopSystem and
  saphana_stop function.
  (bsc#1182115)
- If the cluster is down during a SR change event, these events
  need special care. They need to pick-up separately to not get
  lost.
- integrate man pages back to the base package SAPHanaSR-ScaleOut.
  The doc package SAPHanaSR-ScaleOut-doc will still exists, but
  only contain the file 'SAPHanaSR-Setup-Guide.pdf'
- During a SR takeover there may be a small time frame where the
  srHook gets a state change from the API with an empty site name.
  This results in a mis-configuration of the cluster. So log the
  occurrence of an empty site name, but do not generate bad
  formatted cluster attribute name.
  (analog to ScaleUp - bsc#1173581)
- add SAPHanaSR-call-monitor
- handle 'leftover instances'
  if HANA is configured to have only one master name server, but
  no additional master name server candidates, there may be the
  situation, where the master name server died and so the landscape
  has no active name server anymore.
  But there are other instances running with active communication
  channels. To prevent data corruption or operations on outdated
  data, we identify and stop these 'leftover' instances.
- add workaround for 'sapcontrol -function WaitforStopped'
  terminating to early.
  If the master name server dies and does not have a failover
  candidate but there are still running worker nodes the command
  'sapcontrol -function WaitforStopped' terminates to early and
  does not wait till all the remaining worker nodes are down.
  So the resource agent needs to wait during his 'stopSystem'
  function till the last "partial" node is down before returning
  a result to the cluster.
  (bsc#1196650)
- manual page updates:
  SAPHanaSR-ScaleOut.7 (bsc#1144442)
  SAPHanaSR-showAttr.8 (bsc#1144312)
  and others</changelog>
  <changelog author="abriel@suse.com" date="1641816000">- change version to 0.181.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189532, bsc#1189533)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)
- add switch 'cib_access' to the SAPHanaSrMultiTarget hook to give
  control over the hook runtime.
  Default is 'all-on' which means there are 3 cib calls performed
  inside the hook script.
  Changing the value of 'cib_access' inside the global.ini file to
  'site-on' to perform the absolute minimum cib calls (only one)
  (bsc#1189540)</changelog>
  <changelog author="abriel@suse.com" date="1669723200">- Version bump to 0.184.1
  * add new HA/DR provider hook susChkSrv supporting a fast-dying
    indexserver
    (jsc#PED-1241, jsc#PED-1240)
  * add new HA/DR provider hook susTkOver for blocking manual
    takeovers
    (jsc#SLE-16347)
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix SAPHanaSR-replay-archive to handle hb_report archives again
    (bsc#1198897)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * add lost-nameserver-slave handling to SAPHanaTopology, to avoid
    toggeling SAPHanaController resource, if all nameserver-masters
    got lost.
    SAPHanaController keeps started, if WAITING4NODES event needs
    to be processed. This only keeps the resource "started".
    The SAP HANA instance will only be started, if enough nodes are
    available to fulfill the needs of the SAP HANA landscape.
  * add new tool SAPHanaSR-manageProvider to show, add and delete
    HA/DR provider sections in the global.ini of SAP HANA.
  * changes to the demote_clone function of the resource agent:
    if the role is '*:shtdown:shtdown:shtdown' (topology agent run
    into timeouts) the function fail with rc=1, to get the managed
    resource stopped
    changes to the stop_clone function of the topology agent:
    call landscapeHostConfiguration.py and set the roles as they
    were reported. If the command timed out, set the role to
    '*:shtdown:shtdown:shtdown' and return 1 to get the node
    fenced.
    The used timeout for the landscapeHostConfiguration.py call can
    be configured by the cluster action timeout, if needed. It will
    be 50% of the action timeout or the minimum of 300s.
    (bsc#1198127)
  * SAPHanaSRTools.pm: shows terminate node attribute too
  * change SAPHanaSR-manageAttr to support the different behaviour
    of 'crmadmin -qD' in different pacemaker versions
    (bsc#1200969)
  * fix HANA_CALL function to support MCOS environments again
    (bsc#1198780)
  * correct the order constraint in man page
    ocf_suse_SAPHanaTopology.7
    (bsc#1197239)</changelog>
  <changelog author="abriel@suse.com" date="1689249600">- Version bump to 0.185.0
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * fix the path for the HA/DR provider hook in the global.ini
    examples to be useful
    (bsc#1210573)
  * update man pages:
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSrMultiTarget.py.7
    SAPHanaSR.py.7
    SAPHanaSR-monitor.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-manageAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1692964800">- Version bump to 0.185.1
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * modify /tmp full fix
    (bsc#1210728)
  * update man pages:
    SAPHanaSR-ScaleOut.7
  * add improvements from SAP to the RA scripts, part II
    (jsc#PED-1739, jsc#PED-2608)</changelog>
  <changelog author="abriel@suse.com" date="1702468800">- Version bump to 0.185.2
  * fix cluster state in SAPHanaSR-manageAttr by supporting the
    different behaviour of 'crmadmin -q -S' in different pacemaker
    versions
    (bsc#1217830)
  * inside SAPHanaSR-hookHelper use the full path for the cibadmin
    command to support non root users in special user environments
    (bsc#1216484)
  * if the SAPHanaSrMultiTarget hook has successfully reported a
    SR event to the cluster a still existing fall-back state file
    will be removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * update man pages:
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaController.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 0.185.3
  * Fix the hexdump log for empty node states
  * Fix exception handling in function 'logTimestamp' of HA/DR
    provider SAPHanaSrMultiTarget.py (bsc#1218901)
  * update man pages:
    SAPHanaSR-ScaleOut.7
    SAPHanaSR.py.7
    SAPHanaSrMultiTarget.py.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-showAttr.8
    SAPHanaSR-manageProvider.8</changelog>
</package>
<package pkgid="43d7e0b632411e6e0bfe04ed9cb80055d4c03d61981f6b66ad27f7fd879c3a6e" name="SAPHanaSR-angi" arch="noarch">
  <version epoch="0" ver="1.2.7" rel="150500.3.9.1"/>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1681732800">- New package name and new version 1.001.4
  * New package SAPHanaSR-angi
    SAP HANA System Replication - A New Generation Interface
    (jsc#PED-6402)
  * support SAPHana ScaleUp and ScaleOut environments with one
    set of resource agents
- conflicting with the 'old' packages SAPHanaSR and
  SAPHanaSR-ScaleOut
- old changelog entries preserved for history reasons as
  SAPHanaSR-angi is based on all these changes.</changelog>
  <changelog author="abriel@suse.com" date="1688558400">- Version bump to 1.001.5
  * package is still in status 'technical preview'
  * add support for SAPHana ScaleOut environments without standby
    nodes
  * starting to rewrite SAPHanaSR tools from bash to python.
    SAPHanaSR-showAttr and SAPHanaSR-replay-archive
    The name of the tools is not changed by this action, but there
    are some improvements in functionality. See the man pages for
    details.
    The tools SAPHanaSR-monitor and SAPHanaSR-filter are deprecated.
    The classic version of these tools is still shipped in the
    package side-by-side to the rewritten and more powerful
    tools in /usr/bin. Their name is suffixed by '-legacy'.
    The classic version of the tools is deprecated and will be
    removed in a later package update.</changelog>
  <changelog author="fabian.herschel@suse.com" date="1691496000">- Version bump to 1.2.0
  * SAPHanaFilesystem RA added (poc status)</changelog>
  <changelog author="abriel@suse.com" date="1702641600">- Version bump to 1.2.3
  * package is still in status 'technical preview'
  * SAPHanaFilesystem RA has still POC status
  * add parameter 'ON_FAIL_ACTION' to SAPHanaFilesystem RA (POC)
  * improve the usage of SAP virtual hostnames
  * if the susHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * SAPHanaController: change default stop timeout from 3600 to 600
  * SAPHanaController: change default promote timeout from 3600 to
    900
  * try to make set_ and get_hana_attribute function more reliable
    by monitoring the result of the crm_attribute calls
  * fix typo in example srHook/global.ini_susHanaSR
  * fix missing trace section in example srHook/global.ini_susChkSrv
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susTkOver.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 1.2.7
  * package SAPHanaSR-angi and SAPHanaFilesystem RA are now
    in state 'supported'
  * add feature HANA 'FAST-STOP' and parameter 'ON_FAIL_ACTION'
  * new demo script SAPHanaSR-upgrade-to-angi-demo
  * added crm config examples
  * susHanaSR.py adapt syntax
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * susChkSrv.py - relocate function logTimestamp()
  * susHanaSR.py - catch possible I/O error
  * security improvements
    (bsc#1218696, bsc#1218698 and bsc#1218699)
  * remove instance parameter "REMOVE_SAP_SOCKETS", no longer
    supported
  * add detailed timing log messages for runtime information
  * add cache/live value optimization
  * new man page:
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-upgrade-to-angi-demo.8
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-replay-archive.8</changelog>
</package>
<package pkgid="018c692ad22e0691d93dad0b46e98b28ff901c4059e1f6f8395dc9039dd490e2" name="SAPHanaSR-angi" arch="src">
  <version epoch="0" ver="1.2.7" rel="150500.3.9.1"/>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1681732800">- New package name and new version 1.001.4
  * New package SAPHanaSR-angi
    SAP HANA System Replication - A New Generation Interface
    (jsc#PED-6402)
  * support SAPHana ScaleUp and ScaleOut environments with one
    set of resource agents
- conflicting with the 'old' packages SAPHanaSR and
  SAPHanaSR-ScaleOut
- old changelog entries preserved for history reasons as
  SAPHanaSR-angi is based on all these changes.</changelog>
  <changelog author="abriel@suse.com" date="1688558400">- Version bump to 1.001.5
  * package is still in status 'technical preview'
  * add support for SAPHana ScaleOut environments without standby
    nodes
  * starting to rewrite SAPHanaSR tools from bash to python.
    SAPHanaSR-showAttr and SAPHanaSR-replay-archive
    The name of the tools is not changed by this action, but there
    are some improvements in functionality. See the man pages for
    details.
    The tools SAPHanaSR-monitor and SAPHanaSR-filter are deprecated.
    The classic version of these tools is still shipped in the
    package side-by-side to the rewritten and more powerful
    tools in /usr/bin. Their name is suffixed by '-legacy'.
    The classic version of the tools is deprecated and will be
    removed in a later package update.</changelog>
  <changelog author="fabian.herschel@suse.com" date="1691496000">- Version bump to 1.2.0
  * SAPHanaFilesystem RA added (poc status)</changelog>
  <changelog author="abriel@suse.com" date="1702641600">- Version bump to 1.2.3
  * package is still in status 'technical preview'
  * SAPHanaFilesystem RA has still POC status
  * add parameter 'ON_FAIL_ACTION' to SAPHanaFilesystem RA (POC)
  * improve the usage of SAP virtual hostnames
  * if the susHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * SAPHanaController: change default stop timeout from 3600 to 600
  * SAPHanaController: change default promote timeout from 3600 to
    900
  * try to make set_ and get_hana_attribute function more reliable
    by monitoring the result of the crm_attribute calls
  * fix typo in example srHook/global.ini_susHanaSR
  * fix missing trace section in example srHook/global.ini_susChkSrv
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susTkOver.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 1.2.7
  * package SAPHanaSR-angi and SAPHanaFilesystem RA are now
    in state 'supported'
  * add feature HANA 'FAST-STOP' and parameter 'ON_FAIL_ACTION'
  * new demo script SAPHanaSR-upgrade-to-angi-demo
  * added crm config examples
  * susHanaSR.py adapt syntax
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * susChkSrv.py - relocate function logTimestamp()
  * susHanaSR.py - catch possible I/O error
  * security improvements
    (bsc#1218696, bsc#1218698 and bsc#1218699)
  * remove instance parameter "REMOVE_SAP_SOCKETS", no longer
    supported
  * add detailed timing log messages for runtime information
  * add cache/live value optimization
  * new man page:
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-upgrade-to-angi-demo.8
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-replay-archive.8</changelog>
</package>
<package pkgid="56796144e77787eaec40627a45b56338fc3f2ede6f97eb98d38683f8cf49d043" name="SAPHanaSR-doc" arch="noarch">
  <version epoch="0" ver="0.162.4" rel="150000.4.44.1"/>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1698926400">- Version bump to 0.162.2
  * inside SAPHanaSR-hookHelper use the full path for the cibadmin
    command to support non root users in special user environments
    (bsc#1216484)
  * if the SAPHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaTopology.7
    susCostOpt.py.7
    SAPHanaSR-monitor.8
    SAPHanaSR-showAttr.8
  * add improvements from SAP to the RA scripts, part II
    (jsc#PED-1739, jsc#PED-2608)</changelog>
  <changelog author="abriel@suse.com" date="1706529600">- Version bump to 0.162.3
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * fix scope of variable 'site' to be global
    (bsc#1219194)
  * susChkSrv.py - relocate function logTimestamp()
  * update man pages:
    SAPHanaSR.7
    ocf_suse_SAPHana.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 0.162.4
  * unify global.ini examples
  * add demo script SAPHanaSR-upgrade-to-angi-demo
  * update man pages:
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-upgrade-to-angi-demo.8
    SAPHanaSR.py.7</changelog>
</package>
<package pkgid="ac74198ca85ea27504297d47ef0cc9076f2ed5b0c70ad26eb330a8e55612fcb0" name="WebKitGTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="66357789d77c102e20d261f724e311304ee86c8bffd6820b3140d2114debb37f" name="WebKitGTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="677bf4943eca1e2577223e6deba0c46ea7051e153a0b3a0d7347d1d2760b2b7e" name="WebKitGTK-6.0-lang" arch="noarch">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="bd9492cd906dbf1d084580582422926baf8bd3659d4e347b8808635a03439891" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="b0535694a32366f93830f23822c77f7744792780621a2e8bb701ac6e9e770a6c" name="aaa_base" arch="ppc64le">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="9338bc325b60e59b7a48492a7ffd6e7e302ba111ed0ee369bd67e9c4fb6c488f" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="862585b96b291271b7c68f130ab3ab75afc51eac570e5afff94270572a767130" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="520a1a79da52c509673b5dff77405c93ff366e30912447d842d78c4a46fb3007" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="a02632e83d4aabbbda31919d1eab94df6857a3a1256c23312bbbee119897fa53" name="aaa_base-extras" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="0db0504c8c2911422db2fbcbfbd5d4958c333e4b2b85d30e315354d3ad425efd" name="aaa_base-extras" arch="ppc64le">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="d817c2abee0c17c40110a0d91731452b21c9191aaadaaeff8228ec14362ef531" name="aaa_base-extras" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="e0ea28605bac277e348893eb71276b605568a6816e49a46e7ad11e2d9829ee6c" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="ec21a45a7bcb9cf8f1eb14ec5732dde579d52bd1fd22178fe0bd7bc8f15d540b" name="aaa_base-malloccheck" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="534987043fe1e7f9d970edf0c77d39fe0ca252961ef11db407b5c2389d7cd644" name="aaa_base-malloccheck" arch="ppc64le">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="80a97f41c2c270de1f21bbb60939a4af12524cc25bc006b49fdab7af02a43809" name="aaa_base-malloccheck" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="4703a2799fe2f72fae2383fb53f566de046649061b60852c8610a2330d91a163" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="45764b49fe8a507fee4731946d4fec905e44f6293ed0b390f7f714d603374e31" name="aaa_base-wsl" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="11f91458b43459142414113a87e3e313265cdf0ebad4e0685efe536d3f494ef9" name="aaa_base-wsl" arch="ppc64le">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="424150c0321234070da1bf198a144ae983b2f56b63a8230beb1ad8d334a61f07" name="aaa_base-wsl" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="b2542ad8fff7527a59c661537f3c76983058a0d4b4a564d389df2ae1d2efe188" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="02cefa13a9c016190a4b2da88da1ea59d5c045fc52e5f2e79190a03fabbf2837" name="aardvark-dns" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1676376000">- First version of aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1679054400">- Fix libexecdir issue on Leap and SLE</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * bump to v1.6.0-dev
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds
  * bump to v1.8.0-devel</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * v1.11.0 release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20240529
  * Internal networks cannot make external DNS requests
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate nix to 0.29.0
  * [skip-ci] RPM: use default __cargo macro across all envs
  * chore(deps): update dependency containers/automation_images to v20240513
  * fix(deps): update rust crate anyhow to 1.0.83
  * [skip-ci] Packit: separate `packages` key for rhel jobs
  * fix(deps): update rust crate libc to 0.2.154
  * [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
  * [skip-ci] Packit: Remove EL8 jobs
  * fix(deps): update rust crate syslog to ^6.1.1
  * fix reverse ipv6 lookup test flake
  * fix(deps): update hickory-dns monorepo to 0.24.1
  * chore(deps): update rust crate chrono to 0.4.38
  * Don't tear down all server threads on SIGHUP (bsc#1224167)
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate tokio to 1.37.0
  * Update to nix-0.28.0
  * update chrono package
  * chore(deps): update dependency containers/automation_images to v20240320
  * fix(deps): update rust crate anyhow to 1.0.81
  * tests: check queried domain name in reverse lookup tests
  * fix: set name for answers in reverse lookups
  * chore: fix typo in runner script
  * chore: fix log message when doing reverse lookup
  * fix(deps): update rust crate log to 0.4.21
  * fix(deps): update rust crate anyhow to 1.0.80
  * chore(deps): update rust crate chrono to 0.4.34
  * fix(deps): update rust crate async-broadcast to 0.7.0
  * fix(deps): update rust crate tokio to 1.36.0
  * [CI:DOCS] Packit: disable bodhi tasks
  * chore(deps): update rust crate chrono to 0.4.33
  * Bump to 1.11.0-dev</changelog>
</package>
<package pkgid="f88306473701582ef4a5ec91a887f49239797094cb2b804a711733b55779b65f" name="aardvark-dns" arch="ppc64le">
  <version epoch="0" ver="1.11.0" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1676376000">- First version of aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1679054400">- Fix libexecdir issue on Leap and SLE</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * bump to v1.6.0-dev
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds
  * bump to v1.8.0-devel</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * v1.11.0 release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20240529
  * Internal networks cannot make external DNS requests
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate nix to 0.29.0
  * [skip-ci] RPM: use default __cargo macro across all envs
  * chore(deps): update dependency containers/automation_images to v20240513
  * fix(deps): update rust crate anyhow to 1.0.83
  * [skip-ci] Packit: separate `packages` key for rhel jobs
  * fix(deps): update rust crate libc to 0.2.154
  * [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
  * [skip-ci] Packit: Remove EL8 jobs
  * fix(deps): update rust crate syslog to ^6.1.1
  * fix reverse ipv6 lookup test flake
  * fix(deps): update hickory-dns monorepo to 0.24.1
  * chore(deps): update rust crate chrono to 0.4.38
  * Don't tear down all server threads on SIGHUP (bsc#1224167)
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate tokio to 1.37.0
  * Update to nix-0.28.0
  * update chrono package
  * chore(deps): update dependency containers/automation_images to v20240320
  * fix(deps): update rust crate anyhow to 1.0.81
  * tests: check queried domain name in reverse lookup tests
  * fix: set name for answers in reverse lookups
  * chore: fix typo in runner script
  * chore: fix log message when doing reverse lookup
  * fix(deps): update rust crate log to 0.4.21
  * fix(deps): update rust crate anyhow to 1.0.80
  * chore(deps): update rust crate chrono to 0.4.34
  * fix(deps): update rust crate async-broadcast to 0.7.0
  * fix(deps): update rust crate tokio to 1.36.0
  * [CI:DOCS] Packit: disable bodhi tasks
  * chore(deps): update rust crate chrono to 0.4.33
  * Bump to 1.11.0-dev</changelog>
</package>
<package pkgid="a97d1de58e126323a2070b3231acf54d9cdfc381c5877bc30fd644c1c96fe605" name="aardvark-dns" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1676376000">- First version of aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1679054400">- Fix libexecdir issue on Leap and SLE</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * bump to v1.6.0-dev
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds
  * bump to v1.8.0-devel</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * v1.11.0 release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20240529
  * Internal networks cannot make external DNS requests
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate nix to 0.29.0
  * [skip-ci] RPM: use default __cargo macro across all envs
  * chore(deps): update dependency containers/automation_images to v20240513
  * fix(deps): update rust crate anyhow to 1.0.83
  * [skip-ci] Packit: separate `packages` key for rhel jobs
  * fix(deps): update rust crate libc to 0.2.154
  * [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
  * [skip-ci] Packit: Remove EL8 jobs
  * fix(deps): update rust crate syslog to ^6.1.1
  * fix reverse ipv6 lookup test flake
  * fix(deps): update hickory-dns monorepo to 0.24.1
  * chore(deps): update rust crate chrono to 0.4.38
  * Don't tear down all server threads on SIGHUP (bsc#1224167)
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate tokio to 1.37.0
  * Update to nix-0.28.0
  * update chrono package
  * chore(deps): update dependency containers/automation_images to v20240320
  * fix(deps): update rust crate anyhow to 1.0.81
  * tests: check queried domain name in reverse lookup tests
  * fix: set name for answers in reverse lookups
  * chore: fix typo in runner script
  * chore: fix log message when doing reverse lookup
  * fix(deps): update rust crate log to 0.4.21
  * fix(deps): update rust crate anyhow to 1.0.80
  * chore(deps): update rust crate chrono to 0.4.34
  * fix(deps): update rust crate async-broadcast to 0.7.0
  * fix(deps): update rust crate tokio to 1.36.0
  * [CI:DOCS] Packit: disable bodhi tasks
  * chore(deps): update rust crate chrono to 0.4.33
  * Bump to 1.11.0-dev</changelog>
</package>
<package pkgid="499610eb025fcb432bdd554fad706335c12167a736122dac7ed2e34339e46ba0" name="aardvark-dns" arch="src">
  <version epoch="0" ver="1.11.0" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1676376000">- First version of aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1679054400">- Fix libexecdir issue on Leap and SLE</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * bump to v1.6.0-dev
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds
  * bump to v1.8.0-devel</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * v1.11.0 release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20240529
  * Internal networks cannot make external DNS requests
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate nix to 0.29.0
  * [skip-ci] RPM: use default __cargo macro across all envs
  * chore(deps): update dependency containers/automation_images to v20240513
  * fix(deps): update rust crate anyhow to 1.0.83
  * [skip-ci] Packit: separate `packages` key for rhel jobs
  * fix(deps): update rust crate libc to 0.2.154
  * [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
  * [skip-ci] Packit: Remove EL8 jobs
  * fix(deps): update rust crate syslog to ^6.1.1
  * fix reverse ipv6 lookup test flake
  * fix(deps): update hickory-dns monorepo to 0.24.1
  * chore(deps): update rust crate chrono to 0.4.38
  * Don't tear down all server threads on SIGHUP (bsc#1224167)
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate tokio to 1.37.0
  * Update to nix-0.28.0
  * update chrono package
  * chore(deps): update dependency containers/automation_images to v20240320
  * fix(deps): update rust crate anyhow to 1.0.81
  * tests: check queried domain name in reverse lookup tests
  * fix: set name for answers in reverse lookups
  * chore: fix typo in runner script
  * chore: fix log message when doing reverse lookup
  * fix(deps): update rust crate log to 0.4.21
  * fix(deps): update rust crate anyhow to 1.0.80
  * chore(deps): update rust crate chrono to 0.4.34
  * fix(deps): update rust crate async-broadcast to 0.7.0
  * fix(deps): update rust crate tokio to 1.36.0
  * [CI:DOCS] Packit: disable bodhi tasks
  * chore(deps): update rust crate chrono to 0.4.33
  * Bump to 1.11.0-dev</changelog>
</package>
<package pkgid="10b88f9f5ec5363ee8d4399db52288a1e432298bb6b121223217bc7ad57fb076" name="aardvark-dns" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1676376000">- First version of aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1679054400">- Fix libexecdir issue on Leap and SLE</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * bump to v1.6.0-dev
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds
  * bump to v1.8.0-devel</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * v1.11.0 release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20240529
  * Internal networks cannot make external DNS requests
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate nix to 0.29.0
  * [skip-ci] RPM: use default __cargo macro across all envs
  * chore(deps): update dependency containers/automation_images to v20240513
  * fix(deps): update rust crate anyhow to 1.0.83
  * [skip-ci] Packit: separate `packages` key for rhel jobs
  * fix(deps): update rust crate libc to 0.2.154
  * [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
  * [skip-ci] Packit: Remove EL8 jobs
  * fix(deps): update rust crate syslog to ^6.1.1
  * fix reverse ipv6 lookup test flake
  * fix(deps): update hickory-dns monorepo to 0.24.1
  * chore(deps): update rust crate chrono to 0.4.38
  * Don't tear down all server threads on SIGHUP (bsc#1224167)
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate tokio to 1.37.0
  * Update to nix-0.28.0
  * update chrono package
  * chore(deps): update dependency containers/automation_images to v20240320
  * fix(deps): update rust crate anyhow to 1.0.81
  * tests: check queried domain name in reverse lookup tests
  * fix: set name for answers in reverse lookups
  * chore: fix typo in runner script
  * chore: fix log message when doing reverse lookup
  * fix(deps): update rust crate log to 0.4.21
  * fix(deps): update rust crate anyhow to 1.0.80
  * chore(deps): update rust crate chrono to 0.4.34
  * fix(deps): update rust crate async-broadcast to 0.7.0
  * fix(deps): update rust crate tokio to 1.36.0
  * [CI:DOCS] Packit: disable bodhi tasks
  * chore(deps): update rust crate chrono to 0.4.33
  * Bump to 1.11.0-dev</changelog>
</package>
<package pkgid="f5acb4333f9ba4435a4bf2cbb6b582100947dacf644039f386f96b9329fdea67" name="ant" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="817a720836b054e4e80197e7fd409b929d5586f820e3261ad13965ecad0fb610" name="ant" arch="src">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="1a97373c1c9d3facd0b58860a6fa1d173fba2957fcabcb5aa8c5c2f249ea7d9f" name="ant-antlr" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="f66b1883ac47296f7edd4b822d09abb2362a58cc0bca086a9b0d4bec85459976" name="ant-antlr" arch="src">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="9675fd504ca9496ad7e9ef51f95a51264e621f86761d210e3fbb15ec400b3788" name="ant-apache-bcel" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="71e3b4f01d8302672600056fac0ff43772696f015ee01e88800bfa5bb4da686f" name="ant-apache-bsf" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="368be49745f104d29e59b49c88323c7be2b26d9aa17dc77aa36971c512a9ff14" name="ant-apache-log4j" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="3c81786fc6c55af109af9f5c839e4efa9f3cee0d2c001fdbbb43230f6a17e921" name="ant-apache-oro" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="f85184bd1ca83900e99a0159ae3273580b4598e08dfd16227bd8b39a6dca2869" name="ant-apache-regexp" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="52309cbbca2e73fcf8744d90e8fc3e9415075f768191804e5cc2aa81e86b7896" name="ant-apache-resolver" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="7da998f26ff5924ba7977be930b7d6a57420c58a771b04dbd0a74f6f4a43f228" name="ant-apache-xalan2" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="35382fd3d9e6ad3b4d30e77f57b032c858fa281d48e3a836841ef9b2b92049df" name="ant-commons-logging" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="6a3e5bb99604d1d2549fdfc3fb64a685ffadab5ddb151621733accf52f3ec921" name="ant-commons-net" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="fbc5f9d14a3c79ca97a51ebb4b9a6ab48d1cc9adf811f9de5f96342f0a873988" name="ant-imageio" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="be421c463f56b84178154364f72725daea51071bafd8cbbf04c3b1feb9c493bc" name="ant-jakartamail" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="fbc12591a5ecd2d7eed791a024d6d4542fd07a1b392a937ff577ec99f8699a15" name="ant-javamail" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="6179b5bc9a84f59bb6eebd4bb1c653b57390c2d6e7da0ecd7ca06fbdd3d5ff33" name="ant-jdepend" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="8650ca83dac1c6e98b14778f4b1e80da0c68d59dab38b19ed6f2a2625fc18750" name="ant-jmf" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="120d168cb500b0c10dbd858a5598eca680d6655a7d8ce7eac189a25e9e43c063" name="ant-jsch" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="de561ed662bbe9a4b0c6c2a0c776a5f609304ddd2815f32d4fe9059fb06a8d99" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="be23b6e110d357905214d8c5679a352c3a3405c09ce78b30e68eea4ba21f3493" name="ant-junit" arch="src">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="0b6feffb53325df3e9b21520964a1c2f0bd96322e893fd44a7c07887ce99512f" name="ant-junit5" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="273c0417a7d5389c8db27a9fe7bb54026788dfe6cd971ddafae0d3f97f144e59" name="ant-junit5" arch="src">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="f610bd3257fc3d48f856d22237487660624e4df6fa53eb2c088830a7320f9a1a" name="ant-manual" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="3b2195c79c9090ff69f57495ffaae2e7d676e50b1aee3117136478d04f764492" name="ant-scripts" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="5f191773d5849d059b32eb6d338a2729a40bf2c06d63606fe162bb7958eb865f" name="ant-swing" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="cc8ab96f7397814a3908ee5ff25ae406de7ccb9dd3f9706a94c140d645b06543" name="ant-testutil" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="eb1138642cd6442cdf7436ce80b27151af201676ee27b8e66f65edd5bf419096" name="ant-xz" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="07062ac75e044b6eddc3bbb0cfff3a18a052bd2f6c81d46d6cf95b8b2db1bf66" name="aom-tools" arch="aarch64">
  <version epoch="0" ver="3.7.1" rel="150600.3.3.1"/>
  <changelog author="elimat@opensuse.org" date="1614600000">- Update to version 2.0.2:
  * Prepare for the libaom v2.0.2 release
  * Call av1_setup_frame_size() when dropping a frame
  * Avoid memset in filter_intra_predictor module
  * Fix a typo bug in apply_temporal_filter_planewise
  * Modify the assertion in temporal filter intrinsics
  * Fix unit test ThreadTestLarge.EncoderResultTest/49
  * Add -Wimplicit-function-declaration as C flag only
  * Update CHANGELOG for libaom v2.0.1
  * Set allow_screen_content_tools to 0 in rt mode
  * chroma_check: don't access UV planes if monochrome</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620648000">- Update to version 3.1.0 (bsc#1185843):
  https://aomedia.googlesource.com/aom/+/refs/tags/v3.1.0
  This release adds an "all intra" mode to the encoder, which significantly
  speeds up the encoding of AVIF still images at speed 6.
  - Upgrading:
    All intra mode for encoding AVIF still images and AV1 all intra videos:
    AOM_USAGE_ALL_INTRA (2) can be passed as the 'usage' argument to
    aom_codec_enc_config_default().
    New encoder control IDs added:
  - AV1E_SET_ENABLE_DIAGONAL_INTRA: Enable diagonal (D45 to D203) intra
    prediction modes (0: false, 1: true (default)). Also available as
    "enable-diagonal-intra" for the aom_codec_set_option() function.
    New aom_tune_metric enum value: AOM_TUNE_BUTTERAUGLI. The new aomenc option
  - -tune=butteraugli was added to optimize the encoder’s perceptual quality by
    optimizing the Butteraugli metric. Install libjxl (JPEG XL) and then pass
  - DCONFIG_TUNE_BUTTERAUGLI=1 to the cmake command to enable it.
- Includes 3.0
  https://aomedia.googlesource.com/aom/+/refs/tags/v3.0.0
  This release includes compression efficiency improvement, speed improvement
  for realtime mode, as well as some new APIs.
  - Upgrading:
    Support for PSNR calculation based on stream bit-depth.
    New encoder control IDs added:
  - AV1E_SET_ENABLE_RECT_TX
  - AV1E_SET_VBR_CORPUS_COMPLEXITY_LAP
  - AV1E_GET_BASELINE_GF_INTERVAL
  - AV1E_SET_ENABLE_DNL_DENOISING
    New decoder control IDs added:
  - AOMD_GET_FWD_KF_PRESENT
  - AOMD_GET_FRAME_FLAGS
  - AOMD_GET_ALTREF_PRESENT
  - AOMD_GET_TILE_INFO
  - AOMD_GET_SCREEN_CONTENT_TOOLS_INFO
  - AOMD_GET_STILL_PICTURE
  - AOMD_GET_SB_SIZE
  - AOMD_GET_SHOW_EXISTING_FRAME_FLAG
  - AOMD_GET_S_FRAME_INFO
    New aom_tune_content enum value: AOM_CONTENT_FILM
    New aom_tune_metric enum value: AOM_TUNE_VMAF_NEG_MAX_GAIN
    Coefficient and mode update can be turned off via
    AV1E_SET_{COEFF/MODE}_COST_UPD_FREQ.
    New key &amp; value API added, available with aom_codec_set_option() function.
    Scaling API expanded to include 1/4, 3/4 and 1/8.
  - Enhancements:
    Better multithreading performance with realtime mode.
    New speed 9 setting for faster realtime encoding.
    Smaller binary size with low bitdepth and realtime only build.
    Temporal denoiser and its optimizations on x86 and Neon.
    Optimizations for scaling.
    Faster encoding with speed settings 2 to 6 for good encoding mode.
    Improved documentation throughout the library, with function level
    documentation, tree view and support for the dot tool.
  - Bug fixes:
    Aside from those mentioned in v2.0.1 and v2.0.2, this release includes the
    following bug fixes:
    Issue 2940: Segfault when encoding with --use-16bit-internal and --limit &gt; 1
    Issue 2941: Decoder mismatch with --rt --bit-depth=10 and --cpu-used=8
    Issue 2895: mingw-w64 i686 gcc fails to build
    Issue 2874: Separate ssse3 functions from sse2 file.</changelog>
  <changelog author="rpm@fthiessen.de" date="1625227200">- Update to version 3.1.1
  * Fix vmaf model initialization error when not set to tune=vmaf
  * Fix consistent crash on near-static screen content, keyframe
    related
  * Fix tune=butteraugli mode
- Disable NEON on arm where not available.</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- Update to version 3.1.2:
  * Update AUTHORS,CHANGELOG,CMakeLists.txt for v3.1.2
  * Avoid chroma resampling for 420mpeg2 input
  * Check array has two elements before using index 1
  * Fix DecodeScalabilityTest failure in realtime only
  * Store temporal_id and spatial_id of decoded frame
  * exports.cmake: use APPLE and WIN32 and use def for mingw-w64</changelog>
  <changelog author="pgajdos@suse.com" date="1629892801">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631188800">- security update
- added patches
  fix CVE-2021-30474 [bsc#1186799], aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
  + libaom-CVE-2021-30474.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633694400">- Update to version 3.1.3:
  * Update CHANGELOG for v3.1.3-rc2
  * Detect chroma subsampling more directly
  * Detect chroma subsampling more directly
  * image2yuvconfig() should calculate uv_crop_width
  * aom/aom_encoder.h: remove configure option reference
  * aom_encoder.h: fix rc_overshoot_pct range
  * Update AUTHORS,CHANGELOG,CMakeLists.txt for v3.1.3
  * aom_install: don't exclude msvc from install
  * aom_install: use relpath for install
  * aom_install: Install lib dlls to bindir</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634126400">- fix service data</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634299200">- Update to version 3.2.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, as well
    as some new features.
  * New Features:
    + Introduced speeds 7, 8, and 9 for all intra mode.
    + Introduced speed 10 for real time mode.
    + Introduced an API that allows external partition decisions.
    + SVC: added support for compound prediction.
    + SVC: added support for fixed SVC modes.
  * Compression Efficiency Improvements:
    + Intra-mode search improvement.
    + Improved real time (RT) mode BDrate savings by ~5% (RT speed
    5) and ~12% (RT speed 6). The improvement was measured on the
    video conference set.
    + Improved real time mode for nonrd path (speed 7, 8, 9):
    BDrate gains of ~3-5%.
    + Rate control and RD adjustments based on ML research in VP9.
    Gains of ~0.5-1.0% for HD.
  * Perceptual Quality Improvements:
    + Added a new mode --deltaq-mode=3 to improve perceptual
    quality based on a differential contrast model for still
    images.
    + Added a new mode –deltaq-mode=4 to improve perceptual quality
    based on user rated cq_level data set for still images.
    + Weighting of some intra mode and partition size choices to
    better manage and retain texture.
  * Speedup and Memory Optimizations:
    + Further improved 2-pass good quality encoder speed:
    . Speed 2 speedup: 18%
    . Speed 3 speedup: 22%
    . Speed 4 speedup: 37%
    . Speed 5 speedup: 30%
    . Speed 6 speedup: 20%
    + Optimized the real time encoder (measured on the video
    conference set):
    . RT speed 5 speedup: 110%
    . RT speed 6 speedup: 77%
  * Bug Fixes
    + Issue 3069: Fix one-pass mode keyframe placement off-by-one
    error.
    + Issue 3156: Fix a bug in av1_quantize_lp AVX2 optimization.
- Drop libaom-CVE-2021-30474.patch: Fixed upstream.
- Drop libaom-CVE-2021-30475.patch: Fixed upstream.
- Remove changesgenerate option from _service file, use data from
  CHANGELOG to fill .changes instead as it it much nicer and human
  readable than just a list of commit messages.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645185600">- Update to version 3.3.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, some
    new features, and several bug fixes.
  * New Features
  - AV1 RT: Introducing CDEF search level 5
  - Changed real time speed 4 to behave the same as real time
    speed 5
  - Add --deltaq-strength
  - rtc: Allow scene-change and overshoot detection for svc
  - rtc: Intra-only frame for svc
  - AV1 RT: Option 2 for codec control AV1E_SET_ENABLE_CDEF to
    disable CDEF on non-ref frames
  - New codec controls AV1E_SET_LOOPFILTER_CONTROL and
    AOME_GET_LOOPFILTER_LEVEL
  - Improvements to three pass encoding
  * Compression Efficiency Improvements: Overall compression gains:
    0.6%
  * Perceptual Quality Improvements
  - Improves the perceptual quality of high QP encoding for
    delta-q mode 4
  - Auto select noise synthesis level for all intra
  * Speedup and Memory Optimizations
  - Added many SSE2 optimizations.
  - Good quality 2-pass encoder speedups:
    o Speed 2: 9%
    o Speed 3: 12.5%
    o Speed 4: 8%
    o Speed 5: 3%
    o Speed 6: 4%
  - Real time mode encoder speedups:
    o Speed 5: 2.6% BDRate gain, 4% speedup
    o Speed 6: 3.5% BDRate gain, 4% speedup
    o Speed 9: 1% BDRate gain, 3% speedup
    o Speed 10: 3% BDRate gain, neutral speedup
  - All intra encoding speedups (AVIF):
    o Single thread - speed 6: 8%
    o Single thread - speed 9: 15%
    o Multi thread(8) - speed 6: 14%
    o Multi thread(8) - speed 9: 34%
  * Bug Fixes
  - Issue 3163: Segmentation fault when using
  - -enable-keyframe-filtering=2
  - Issue 2436: Integer overflow in av1_warp_affine_c()
  - Issue 3226: armv7 build failure due to gcc-11
  - Issue 3195: Bug report on libaom (AddressSanitizer:
    heap-buffer-overflow)
  - Issue 3191: Bug report on libaom (AddressSanitizer: SEGV on
    unknown address)
- Drop libaom-devel Requires from libaom-devel-doc sub-package: We
  do not need the devel package to be able to read the devel
  documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662292800">- Update to version 3.4.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, and
    some new features. There are no ABI or API breaking changes in
    this release.
  * New Features:
  - New --dist-metric flag with "qm-psnr" value to use
    quantization matrices in the distortion computation for RD
    search. The default value is "psnr".
  - New command line option "--auto-intra-tools-off=1" to make
    all-intra encoding faster for high bit rate under
    "--deltaq-mode=3" mode.
  - New rate control library aom_av1_rc for real-time hardware
    encoders. Supports CBR for both one spatial layer and SVC.
  - New image format AOM_IMG_FMT_NV12 can be used as input to the
    encoder. The presence of AOM_IMG_FMT_NV12 can be detected at
    compile time by checking if the macro AOM_HAVE_IMG_FMT_NV12
    is defined.
  - New codec controls for the encoder:
    o AV1E_SET_AUTO_INTRA_TOOLS_OFF. Only in effect if
  - -deltaq-mode=3.
    o AV1E_SET_RTC_EXTERNAL_RC
    o AV1E_SET_FP_MT. Only supported if libaom is built with
  - DCONFIG_FRAME_PARALLEL_ENCODE=1.
    o AV1E_GET_TARGET_SEQ_LEVEL_IDX
  - New key-value pairs for the key-value API:
    o --auto-intra-tools-off=0 (default) or 1. Only in effect if
  - -deltaq-mode=3.
    o --strict-level-conformance=0 (default) or 1
    o --fp-mt=0 (default) or 1. Only supported if libaom is built
    with -DCONFIG_FRAME_PARALLEL_ENCODE=1.
  - New aomenc options (not supported by the key-value API):
    o --nv12
  * Compression Efficiency Improvements:
  - Correctly calculate SSE for high bitdepth in skip mode, 0.2%
    to 0.6% coding gain.
  - RTC at speed 9/10: BD-rate gain of ~4/5%
  - RTC screen content coding: many improvements for real-time
    screen at speed 10 (quality, speedup, and rate control), up
    to high resolutions (1080p).
  - RTC-SVC: fixes to make intra-only frames work for spatial
    layers.
  - RTC-SVC: quality improvements for temporal layers.
  - AV1 RT: A new passive rate control strategy for screen
    content, an average of 7.5% coding gain, with some clips of
    20+%. The feature is turned off by default due to higher bit
    rate variation.
  * Perceptual Quality Improvements:
  - RTC: Visual quality improvements for high speeds (9/10)
  - Improvements in coding quality for all intra mode
  * Speedup and Memory Optimizations:
  - ~10% speedup in good quality mode encoding.
  - ~7% heap memory reduction in good quality encoding mode for
    speed 5 and 6.
  - Ongoing improvements to intra-frame encoding performance on
    Arm
  - Faster encoding speed for "--deltaq-mode=3" mode.
  - ~10% speedup for speed 5/6, ~15% speedup for speed 7/8, and
    ~10% speedup for speed 9/10 in real time encoding mode
  - ~20% heap memory reduction in still-picture encoding mode for
    360p-720p resolutions with multiple threads
  - ~13% speedup for speed 6 and ~12% speedup for speed 9 in
    still-picture encoding mode.
  - Optimizations to improve multi-thread efficiency for
    still-picture encoding mode.
  * Bug Fixes:
  - b/204460717: README.md: replace master with main
  - b/210677928: libaom disable_order is surprising for
    max_reference_frames=3
  - b/222461449: -DCONFIG_TUNE_BUTTERAUGLI=1 broken
  - b/227207606: write_greyscale writes incorrect chroma in
    highbd mode
  - b/229955363: Integer-overflow in linsolve_wiener
  - https://crbug.com/aomedia/2032
  - https://crbug.com/aomedia/2397
  - https://crbug.com/aomedia/2563
  - https://crbug.com/aomedia/2815
  - https://crbug.com/aomedia/3009
  - https://crbug.com/aomedia/3018
  - https://crbug.com/aomedia/3045
  - https://crbug.com/aomedia/3101
  - https://crbug.com/aomedia/3130
  - https://crbug.com/aomedia/3173
  - https://crbug.com/aomedia/3184
  - https://crbug.com/aomedia/3187
  - https://crbug.com/aomedia/3190
  - https://crbug.com/aomedia/3195
  - https://crbug.com/aomedia/3197
  - https://crbug.com/aomedia/3201
  - https://crbug.com/aomedia/3202
  - https://crbug.com/aomedia/3204
  - https://crbug.com/aomedia/3205
  - https://crbug.com/aomedia/3207
  - https://crbug.com/aomedia/3208
  - https://crbug.com/aomedia/3209
  - https://crbug.com/aomedia/3213
  - https://crbug.com/aomedia/3214
  - https://crbug.com/aomedia/3219
  - https://crbug.com/aomedia/3222
  - https://crbug.com/aomedia/3223
  - https://crbug.com/aomedia/3225
  - https://crbug.com/aomedia/3226
  - https://crbug.com/aomedia/3228
  - https://crbug.com/aomedia/3232
  - https://crbug.com/aomedia/3236
  - https://crbug.com/aomedia/3237
  - https://crbug.com/aomedia/3238
  - https://crbug.com/aomedia/3240
  - https://crbug.com/aomedia/3243
  - https://crbug.com/aomedia/3244
  - https://crbug.com/aomedia/3246
  - https://crbug.com/aomedia/3248
  - https://crbug.com/aomedia/3250
  - https://crbug.com/aomedia/3251
  - https://crbug.com/aomedia/3252
  - https://crbug.com/aomedia/3255
  - https://crbug.com/aomedia/3257
  - https://crbug.com/aomedia/3259
  - https://crbug.com/aomedia/3260
  - https://crbug.com/aomedia/3267
  - https://crbug.com/aomedia/3268
  - https://crbug.com/aomedia/3269
  - https://crbug.com/aomedia/3276
  - https://crbug.com/aomedia/3278
  - https://crbug.com/chromium/1290068
  - https://crbug.com/chromium/1303237
  - https://crbug.com/chromium/1304990
  - https://crbug.com/chromium/1321141
  - https://crbug.com/chromium/1321388
  - https://crbug.com/oss-fuzz/44846
  - https://crbug.com/oss-fuzz/44856
  - https://crbug.com/oss-fuzz/44862
  - https://crbug.com/oss-fuzz/44904
  - https://crbug.com/oss-fuzz/45056</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663848000">- Update to version 3.5.0:
  * This release is ABI compatible with the last one, including
    speedup and memory optimizations, and new APIs and features.
  * New Features
  - Support for frame parallel encode for larger number of
    threads. --fp-mt flag is available for all build
    configurations.
  - New codec control AV1E_GET_NUM_OPERATING_POINTS
  * Speedup and Memory Optimizations
  - Speed-up multithreaded encoding for good quality mode for
    larger number of threads through frame parallel encoding:
    . 30-34% encode time reduction for 1080p, 16 threads, 1x1
    tile configuration (tile_rows x tile_columns)
    . 18-28% encode time reduction for 1080p, 16 threads, 2x4
    tile configuration
    . 18-20% encode time reduction for 2160p, 32 threads, 2x4
    tile configuration
  - 16-20% speed-up for speed=6 to 8 in still-picture encoding
    mode
  - 5-6% heap memory reduction for speed=6 to 10 in real-time
    encoding mode
  - Improvements to the speed for speed=7, 8 in real-time
    encoding mode
  - Improvements to the speed for speed=9, 10 in real-time screen
    encoding mode
  - Optimizations to improve multi-thread efficiency in real-time
    encoding mode
  - 10-15% speed up for SVC with temporal layers
  - SIMD optimizations:
    . Improve av1_quantize_fp_32x32_neon() 1.05x to 1.24x faster
    . Add aom_highbd_quantize_b{,_32x32,_64x64}_adaptive_neon()
    3.15x to 5.6x faster than "C"
    . Improve av1_quantize_fp_64x64_neon() 1.17x to 1.66x faster
    . Add aom_quantize_b_avx2() 1.4x to 1.7x faster than
    aom_quantize_b_avx()
    . Add aom_quantize_b_32x32_avx2() 1.4x to 2.3x faster than
    aom_quantize_b_32x32_avx()
    . Add aom_quantize_b_64x64_avx2() 2.0x to 2.4x faster than
    aom_quantize_b_64x64_ssse3()
    . Add aom_highbd_quantize_b_32x32_avx2() 9.0x to 10.5x faster
    than aom_highbd_quantize_b_32x32_c()
    . Add aom_highbd_quantize_b_64x64_avx2() 7.3x to 9.7x faster
    than aom_highbd_quantize_b_64x64_c()
    . Improve aom_highbd_quantize_b_avx2() 1.07x to 1.20x faster
    . Improve av1_quantize_fp_avx2() 1.13x to 1.49x faster
    . Improve av1_quantize_fp_32x32_avx2() 1.07x to 1.54x faster
    . Improve av1_quantize_fp_64x64_avx2()  1.03x to 1.25x faster
    . Improve av1_quantize_lp_avx2() 1.07x to 1.16x faster
  * Bug fixes including but not limited to
  - aomedia:3206 Assert that skip_width &gt; 0 for deconvolve
    function
  - aomedia:3278 row_mt enc: Delay top-right sync when intraBC is
    enabled
  - aomedia:3282 blend_a64_*_neon: fix bus error in armv7
  - aomedia:3283 FRAME_PARALLEL: Propagate border size to all
    cpis
  - aomedia:3283 RESIZE_MODE: Fix incorrect strides being used
    for motion search
  - aomedia:3286 rtc-svc: Fix to dynamic_enable spatial layers
  - aomedia:3289 rtc-screen: Fix to skipping inter-mode test in
    nonrd
  - aomedia:3289 rtc-screen: Fix for skip newmv on flat blocks
  - aomedia:3299 Fix build failure with CONFIG_TUNE_VMAF=1
  - aomedia:3296 Fix the conflict --enable-tx-size-search=0 with
    nonrd mode --enable-tx-size-search will be ignored in non-rd
    pick mode
  - aomedia:3304 Fix off-by-one error of max w/h in
    validate_config
  - aomedia:3306 Do not use pthread_setname_np on GNU/Hurd
  - aomedia:3325 row-multithreading produces invalid bitstream in
    some cases
  - chromium:1346938, chromium:1338114
  - compiler_flags.cmake: fix flag detection w/cmake 3.17-3.18.2
  - tools/*.py: update to python3
  - aom_configure.cmake: detect PIE and set CONFIG_PIC
  - test/simd_cmp_impl: use explicit types w/CompareSimd*
  - rtc: Fix to disable segm for aq-mode=3
  - rtc: Fix to color_sensitivity in variance partition
  - rtc-screen: Fix bsize in model rd computation for intra
    chroma
  - Fixes to ensure the correct behavior of the encoder
    algorithms (like segmentation, computation of statistics,
    etc.)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1675857600">- Update to version 3.6.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, and
    some new features. This release is ABI compatible with the last
    release.
  * New Features:
  - New values 20-27 (corresponding to levels 7.0-7.3 and
    8.0-8.3) for the encoder control
    AV1E_SET_TARGET_SEQ_LEVEL_IDX (note that the proposal to add
    the new levels are still in draft status). The original
    special value 24 (keep level stats only for level monitoring)
    is renumbered as 32.
  - New encoder control AV1E_SET_SKIP_POSTPROC_FILTERING to skip
    the application of post-processing filters on reconstructed
    frame in all intra mode.
  - New encoder option "kf-max-pyr-height": Maximum height of
    pyramid structure used for the GOP starting with a key frame
    (-1 to 5).
  - Make SVC work for screen content.
  - Rate control improvements to reduce frame-size spikes for
    screen content coding.
  - RISC-V architecture support with gcc toolchain.
  * Compression Efficiency Improvements:
  - Peak compression efficiency in VOD setting is improved by 1%.
  - 0.7% - 2.2% RTC encoding BDrate gains for real time speed 8
    to 10.
  - 15% RTC encoding BDrate gains for screen content speed 10.
  * Perceptual Quality Improvements:
  - Resolved a visual quality issue that was reported for high
    resolution clips (2K) for speed 4 and above in VOD use case.
  - Visual quality improvements to screen content coding.
  - Quality improvements to temporal layer RTC coding.
  * Speedup and Memory Optimizations:
  - RTC single-thread encoder speedup:
    . ~6% instruction count reduction for speed 5 and 6.
    . ~15% instruction count reduction for speed 7.
    . ~10% instruction count reduction for speed 8 to 10 (&gt;=360p
    resolutions).
  - RTC multi-thread encoder speedup (beyond single-thread
    speedup):
    . 5-8% encode time reduction for speed 7 to 10.
  - RTC screen-content encoder speedup:
    . 11% instruction count reduction for speed 9 and 10 (&gt;=720p
    resolutions).
  - ~5% reduction in heap memory requirements for RTC, speed 6 to
    10.
  * AVIF:
    . 4-5% speedup for speed 9 in still-picture encoding mode.
    . 3-4% heap memory reduction in still-picture encoding mode
    for 360p-720p resolutions with multiple threads.
  * Bug Fixes:
  - Added a workaround for an AV1 specification bug which makes
    TRANSLATION type global motion models unusable.
  - Fixed AddressSanitizer global-buffer-overflow errors in
    av1/encoder/arm/neon/av1_fwd_txfm2d_neon.c.
  - Fixed AddressSanitizer heap-buffer-overflow error in
    av1_wiener_convolve_add_src_neon().
  - chromium:1393384 Avoid scene detection on spatial resize.
  - aomedia:3308 Remove color artifacts under high motion.
  - aomedia:3310 Avoid out of memory failures with Visual Studio
    2017, 2019, and 2022 for Win32 x86 builds.
  - aomedia:3346 Make SVC work properly for screen content.
  - aomedia:3348 Fix a bug where an uninitialized search_site is
    used.
  - aomedia:3365 Work around what seems like a Visual Studio 2022
    compiler optimization bug.
  - aomedia:3369 Incorrect PSNR values reported by libaom for
    12-bit encode.
- Modernize spec, use cmake_build and ldconfig_scriptlets macros.</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to BSD-2-Clause and AOMPL-1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1683028800">- Revert to BSD-2-Clause licence tag to only use SPDX valid
  license tag.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683720000">- Update to version 3.6.1:
  * aomedia:2871: Guard the support of the 7.x and 8.x levels for
    AV1 under the CONFIG_CWG_C013 config flag, and only output the
    7.x and 8.x levels when explicitly requested.
  * aomedia:3382: Choose sb_size by ppi instead of svc.
  * aomedia:3384: Fix fullpel search limits.
  * aomedia:3388: Replace left shift of xq_active by
    multiplication.
  * aomedia:3389: Fix MV clamping in av1_mv_pred.
  * aomedia:3390: set_ld_layer_depth: cap max_layer_depth to
    MAX_ARF_LAYERS.
  * aomedia:3418: Fix MV clamping in av1_int_pro_motion_estimation.
  * aomedia:3429: Move lpf thread data init to
    lpf_pipeline_mt_init().
  * b:266719111: Fix undefined behavior in Arm Neon code.
  * b:269840681: nonrd_opt: align scan tables.
  * rtc: Fix is_key_frame setting in variance partition.
  * Build: Fix build with clang-cl and Visual Studio.</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1693569600">- New upstream release 3.7.0
  - New Features
  * New codec controls:
  * AV1E_SET_QUANTIZER_ONE_PASS: Set quantizer for each frame.
  * AV1E_ENABLE_RATE_GUIDE_DELTAQ: enable the rate distribution guided delta
    quantization in all intra mode. The "enable-rate-guide-deltaq" option is
    added for this control.
  * AV1E_SET_RATE_DISTRIBUTION_INFO: set the input file for rate
    distribution used in all intra mode. The "rate-distribution-info" option
    is added for this control.
  * AV1E_GET_LUMA_CDEF_STRENGTH
  * AV1E_SET_BITRATE_ONE_PASS_CBR
  * AOM_SCALING_MODE is extended to include 2/3 and 1/3 scaling.
  * aom_tune_metric is extended to include AOM_TUNE_VMAF_SALIENCY_MAP.
    The "tune" option is extended to include "vmaf_saliency_map".
  * SVC example encoder svc_encoder_rtc is able to use the rate control
    library.
  * Loopfilter level and CDEF filter level is supported by RTC rate control
    library.
  * New speed (--cpu-used) 11, intended for RTC screen sharing, added for
    faster encoding with ~3% bdrate loss with 16% IC (instruction count)
    speedup compared to speed 10.
  - Compression Efficiency Improvements
  * Improved VoD encoding performance
  * 0.1-0.6% BDrate gains for encoding speeds 2 to 6
  * Rate control accuracy improvement in VBR mode
  * RTC encoding improvements
  * Screen content mode: 10-19% BDrate gains for speeds 6 - 10
  * Temporal layers video mode, for speed 10:
  * 2 temporal layers on low resolutions: 13-15% BDrate gain
  * 3 temporal layers on VGA/HD: 3-4% BDrate gain
  - Perceptual Quality Improvements
  * Fixed multiple block and color artifacts for RTC screen content by
  * Incorporating color into RD cost for IDTX
  * Reducing thresholds for palette mode in non RD mode
  * Allowing more palette mode testing
  * Improved color sensitivity for altref in non-RD mode.
  * Reduced video flickering for temporal layer encoding.
  - Speedup and Memory Optimizations
  * Speed up the VoD encoder
  * 2-5% for encoding speed 2 to 4
  * 9-15% for encoding speed 5 to 6
  * ARM
  * Standard bitdepth
  * speed 5: +31%
  * speed 4: +2%
  * speed 3: +9%
  * speed 2: +157%
  * High bitdepth
  * speed 5: +85%
  * RTC speedups
  * Screen content mode
  * 15% IC speedup for speeds 6-8
  * ARM: 7% for speed 9, 3% for speed 10
  * Temporal layers video mode
  * 7% speedup for 3 temporal layers on VGA/HD, for speed 10
  * Single layer video
  * x86: 2% IC speedup for speeds 7-10
  * ARM: 2-4% speedup across speeds 5-10
  - Bug Fixes
  * aomedia:3261 Assertion failed when encoding av1 with film grain and
    '--monochrome' flag
  * aomedia:3276 ensure all allocations are checked (partial fix)
  * aomedia:3451 The libaom library calls exit()
  * aomedia:3450 enable -Wshadow for C++ sources
  * aomedia:3449 Test Seg Faults After
    b459af3e345be402db052a143fcc5383d4b74cbd
  * aomedia:3416 prune unused symbols / restrict symbol visibility
  * aomedia:3443 Jenkins failure:
    UninstantiatedParameterizedTestSuite&lt;EstimateNoiseTest&gt;
  * aomedia:3434 realtime failures with CONFIG_BITSTREAM_DEBUG=1
  * aomedia:3433 DeltaqModeTest crash w/row_mt=0
  * aomedia:3429 Encoder crash when turn on both ExternalResize and
    g_threads &gt; 2
  * aomedia:3438 Build failure with
    `-DSANITIZE=address -DBUILD_SHARED_LIBS=ON` when using clang.
  * aomedia:3435 Block artifacts when scrolling with AV1 in screen sharing
    scenarios
  * aomedia:3170 vmaf tune presets produce extreme glitches in one scene
  * aomedia:3401 Building shared libaom with MSVC results in a race condition
    with the export library
  * aomedia:3420 Floating point exception in av1_tpl_get_frame_importance()
  * aomedia:3424 heap-buffer-overflow in ScaleFilterCols_16_C() (SIGABRT)
  * aomedia:3417 examples/svc_encoder_rtc.c is using internal macros and
    functions
  * aomedia:3372 SEGV in assign_frame_buffer_p av1_common_int.h
  * aomedia:3130 'cpu-features.h' file not found on Android NDK 22
  * aomedia:3415 Encoder/decoder mismatch for svc_encoder_rtc running
    1 SL 3 TL
  * aomedia:3412 Lossless Mode Fails Loopback Bit Test
  * aomedia:3409 The use of AV1_VAR_OFFS in av1/encoder/var_based_part.c is
    incorrect for high bit depths
  * aomedia:3403 test_libaom fails with error message
    "feenableexcept() failed" on Linux arm
  * aomedia:3370 Random color block at fast motion area
  * aomedia:3393 Assertion failure in av1_convolve_2d_sr_c()
  * aomedia:3392 Strong artifacting for high bit-depth real-time
  * aomedia:3376 aomenc --threads=10 --deltaq-mode=3 crashes after
    "Allintra: multi-threading of calculating differential contrast"
  * aomedia:3380 Crashes and ASan and TSan errors in deltaq-mode=3
    multithreading code
  * chromium:1410766 heap-buffer-overflow in aom_yv12_copy_v_c
  * Cannot set level via AV1E_SET_TARGET_SEQ_LEVEL_IDX
  * Encoding failure due to the use of loop restoration with unintended use of
    lossless mode.
  * Signed integer overflow in scan_past_frames
  * Signed integer overflow in update_a_sep_sym
  * Flickering in AV1 1440p/2160p HDR transcodes
  * Fixed artifacts with screen share at encoder speed 10
  * Fixed prediction setup for IDTX
- Use system libraries instead of vendored ones
  * system-gtest.patch
  * system-yuv.patch
- Enable debuginfo also on modules written in assembly
- Enable building PowerPC-specific optimizations
- Enable Neon optimized code on ARM and fix runtime CPU detection
- Fix missing images in documentation</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1693915200">- Split docs to multibuild to avoid dependency cycle</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 3.7.1:
  * Bug Fixes:
  - aomedia:3349: heap overflow when increasing resolution
  - aomedia:3478: GCC 12.2.0 emits a -Wstringop-overflow warning
    on aom/av1/encoder/motion_search_facade.c
  - aomedia:3489: Detect encoder and image high bit depth
    mismatch
  - aomedia:3491: heap-buffer-overflow on frame size change
  - b/303023614:  Segfault at encoding time for high bit depth
    images
- Switch buildtime compression to zst.</changelog>
  <changelog author="pgajdos@suse.com" date="1718020800">- security update
- added patches
  fix CVE-2024-5171 [bsc#1226020], heap buffer overflow in img_alloc_helper() caused by integer overflow
  + libaom-CVE-2024-5171.patch</changelog>
</package>
<package pkgid="7f481230165fc83a77c68696c9582eb52009f9a0bf7c165becacb71a043b285a" name="aom-tools" arch="ppc64le">
  <version epoch="0" ver="3.7.1" rel="150600.3.3.1"/>
  <changelog author="elimat@opensuse.org" date="1614600000">- Update to version 2.0.2:
  * Prepare for the libaom v2.0.2 release
  * Call av1_setup_frame_size() when dropping a frame
  * Avoid memset in filter_intra_predictor module
  * Fix a typo bug in apply_temporal_filter_planewise
  * Modify the assertion in temporal filter intrinsics
  * Fix unit test ThreadTestLarge.EncoderResultTest/49
  * Add -Wimplicit-function-declaration as C flag only
  * Update CHANGELOG for libaom v2.0.1
  * Set allow_screen_content_tools to 0 in rt mode
  * chroma_check: don't access UV planes if monochrome</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620648000">- Update to version 3.1.0 (bsc#1185843):
  https://aomedia.googlesource.com/aom/+/refs/tags/v3.1.0
  This release adds an "all intra" mode to the encoder, which significantly
  speeds up the encoding of AVIF still images at speed 6.
  - Upgrading:
    All intra mode for encoding AVIF still images and AV1 all intra videos:
    AOM_USAGE_ALL_INTRA (2) can be passed as the 'usage' argument to
    aom_codec_enc_config_default().
    New encoder control IDs added:
  - AV1E_SET_ENABLE_DIAGONAL_INTRA: Enable diagonal (D45 to D203) intra
    prediction modes (0: false, 1: true (default)). Also available as
    "enable-diagonal-intra" for the aom_codec_set_option() function.
    New aom_tune_metric enum value: AOM_TUNE_BUTTERAUGLI. The new aomenc option
  - -tune=butteraugli was added to optimize the encoder’s perceptual quality by
    optimizing the Butteraugli metric. Install libjxl (JPEG XL) and then pass
  - DCONFIG_TUNE_BUTTERAUGLI=1 to the cmake command to enable it.
- Includes 3.0
  https://aomedia.googlesource.com/aom/+/refs/tags/v3.0.0
  This release includes compression efficiency improvement, speed improvement
  for realtime mode, as well as some new APIs.
  - Upgrading:
    Support for PSNR calculation based on stream bit-depth.
    New encoder control IDs added:
  - AV1E_SET_ENABLE_RECT_TX
  - AV1E_SET_VBR_CORPUS_COMPLEXITY_LAP
  - AV1E_GET_BASELINE_GF_INTERVAL
  - AV1E_SET_ENABLE_DNL_DENOISING
    New decoder control IDs added:
  - AOMD_GET_FWD_KF_PRESENT
  - AOMD_GET_FRAME_FLAGS
  - AOMD_GET_ALTREF_PRESENT
  - AOMD_GET_TILE_INFO
  - AOMD_GET_SCREEN_CONTENT_TOOLS_INFO
  - AOMD_GET_STILL_PICTURE
  - AOMD_GET_SB_SIZE
  - AOMD_GET_SHOW_EXISTING_FRAME_FLAG
  - AOMD_GET_S_FRAME_INFO
    New aom_tune_content enum value: AOM_CONTENT_FILM
    New aom_tune_metric enum value: AOM_TUNE_VMAF_NEG_MAX_GAIN
    Coefficient and mode update can be turned off via
    AV1E_SET_{COEFF/MODE}_COST_UPD_FREQ.
    New key &amp; value API added, available with aom_codec_set_option() function.
    Scaling API expanded to include 1/4, 3/4 and 1/8.
  - Enhancements:
    Better multithreading performance with realtime mode.
    New speed 9 setting for faster realtime encoding.
    Smaller binary size with low bitdepth and realtime only build.
    Temporal denoiser and its optimizations on x86 and Neon.
    Optimizations for scaling.
    Faster encoding with speed settings 2 to 6 for good encoding mode.
    Improved documentation throughout the library, with function level
    documentation, tree view and support for the dot tool.
  - Bug fixes:
    Aside from those mentioned in v2.0.1 and v2.0.2, this release includes the
    following bug fixes:
    Issue 2940: Segfault when encoding with --use-16bit-internal and --limit &gt; 1
    Issue 2941: Decoder mismatch with --rt --bit-depth=10 and --cpu-used=8
    Issue 2895: mingw-w64 i686 gcc fails to build
    Issue 2874: Separate ssse3 functions from sse2 file.</changelog>
  <changelog author="rpm@fthiessen.de" date="1625227200">- Update to version 3.1.1
  * Fix vmaf model initialization error when not set to tune=vmaf
  * Fix consistent crash on near-static screen content, keyframe
    related
  * Fix tune=butteraugli mode
- Disable NEON on arm where not available.</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- Update to version 3.1.2:
  * Update AUTHORS,CHANGELOG,CMakeLists.txt for v3.1.2
  * Avoid chroma resampling for 420mpeg2 input
  * Check array has two elements before using index 1
  * Fix DecodeScalabilityTest failure in realtime only
  * Store temporal_id and spatial_id of decoded frame
  * exports.cmake: use APPLE and WIN32 and use def for mingw-w64</changelog>
  <changelog author="pgajdos@suse.com" date="1629892801">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631188800">- security update
- added patches
  fix CVE-2021-30474 [bsc#1186799], aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
  + libaom-CVE-2021-30474.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633694400">- Update to version 3.1.3:
  * Update CHANGELOG for v3.1.3-rc2
  * Detect chroma subsampling more directly
  * Detect chroma subsampling more directly
  * image2yuvconfig() should calculate uv_crop_width
  * aom/aom_encoder.h: remove configure option reference
  * aom_encoder.h: fix rc_overshoot_pct range
  * Update AUTHORS,CHANGELOG,CMakeLists.txt for v3.1.3
  * aom_install: don't exclude msvc from install
  * aom_install: use relpath for install
  * aom_install: Install lib dlls to bindir</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634126400">- fix service data</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634299200">- Update to version 3.2.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, as well
    as some new features.
  * New Features:
    + Introduced speeds 7, 8, and 9 for all intra mode.
    + Introduced speed 10 for real time mode.
    + Introduced an API that allows external partition decisions.
    + SVC: added support for compound prediction.
    + SVC: added support for fixed SVC modes.
  * Compression Efficiency Improvements:
    + Intra-mode search improvement.
    + Improved real time (RT) mode BDrate savings by ~5% (RT speed
    5) and ~12% (RT speed 6). The improvement was measured on the
    video conference set.
    + Improved real time mode for nonrd path (speed 7, 8, 9):
    BDrate gains of ~3-5%.
    + Rate control and RD adjustments based on ML research in VP9.
    Gains of ~0.5-1.0% for HD.
  * Perceptual Quality Improvements:
    + Added a new mode --deltaq-mode=3 to improve perceptual
    quality based on a differential contrast model for still
    images.
    + Added a new mode –deltaq-mode=4 to improve perceptual quality
    based on user rated cq_level data set for still images.
    + Weighting of some intra mode and partition size choices to
    better manage and retain texture.
  * Speedup and Memory Optimizations:
    + Further improved 2-pass good quality encoder speed:
    . Speed 2 speedup: 18%
    . Speed 3 speedup: 22%
    . Speed 4 speedup: 37%
    . Speed 5 speedup: 30%
    . Speed 6 speedup: 20%
    + Optimized the real time encoder (measured on the video
    conference set):
    . RT speed 5 speedup: 110%
    . RT speed 6 speedup: 77%
  * Bug Fixes
    + Issue 3069: Fix one-pass mode keyframe placement off-by-one
    error.
    + Issue 3156: Fix a bug in av1_quantize_lp AVX2 optimization.
- Drop libaom-CVE-2021-30474.patch: Fixed upstream.
- Drop libaom-CVE-2021-30475.patch: Fixed upstream.
- Remove changesgenerate option from _service file, use data from
  CHANGELOG to fill .changes instead as it it much nicer and human
  readable than just a list of commit messages.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645185600">- Update to version 3.3.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, some
    new features, and several bug fixes.
  * New Features
  - AV1 RT: Introducing CDEF search level 5
  - Changed real time speed 4 to behave the same as real time
    speed 5
  - Add --deltaq-strength
  - rtc: Allow scene-change and overshoot detection for svc
  - rtc: Intra-only frame for svc
  - AV1 RT: Option 2 for codec control AV1E_SET_ENABLE_CDEF to
    disable CDEF on non-ref frames
  - New codec controls AV1E_SET_LOOPFILTER_CONTROL and
    AOME_GET_LOOPFILTER_LEVEL
  - Improvements to three pass encoding
  * Compression Efficiency Improvements: Overall compression gains:
    0.6%
  * Perceptual Quality Improvements
  - Improves the perceptual quality of high QP encoding for
    delta-q mode 4
  - Auto select noise synthesis level for all intra
  * Speedup and Memory Optimizations
  - Added many SSE2 optimizations.
  - Good quality 2-pass encoder speedups:
    o Speed 2: 9%
    o Speed 3: 12.5%
    o Speed 4: 8%
    o Speed 5: 3%
    o Speed 6: 4%
  - Real time mode encoder speedups:
    o Speed 5: 2.6% BDRate gain, 4% speedup
    o Speed 6: 3.5% BDRate gain, 4% speedup
    o Speed 9: 1% BDRate gain, 3% speedup
    o Speed 10: 3% BDRate gain, neutral speedup
  - All intra encoding speedups (AVIF):
    o Single thread - speed 6: 8%
    o Single thread - speed 9: 15%
    o Multi thread(8) - speed 6: 14%
    o Multi thread(8) - speed 9: 34%
  * Bug Fixes
  - Issue 3163: Segmentation fault when using
  - -enable-keyframe-filtering=2
  - Issue 2436: Integer overflow in av1_warp_affine_c()
  - Issue 3226: armv7 build failure due to gcc-11
  - Issue 3195: Bug report on libaom (AddressSanitizer:
    heap-buffer-overflow)
  - Issue 3191: Bug report on libaom (AddressSanitizer: SEGV on
    unknown address)
- Drop libaom-devel Requires from libaom-devel-doc sub-package: We
  do not need the devel package to be able to read the devel
  documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662292800">- Update to version 3.4.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, and
    some new features. There are no ABI or API breaking changes in
    this release.
  * New Features:
  - New --dist-metric flag with "qm-psnr" value to use
    quantization matrices in the distortion computation for RD
    search. The default value is "psnr".
  - New command line option "--auto-intra-tools-off=1" to make
    all-intra encoding faster for high bit rate under
    "--deltaq-mode=3" mode.
  - New rate control library aom_av1_rc for real-time hardware
    encoders. Supports CBR for both one spatial layer and SVC.
  - New image format AOM_IMG_FMT_NV12 can be used as input to the
    encoder. The presence of AOM_IMG_FMT_NV12 can be detected at
    compile time by checking if the macro AOM_HAVE_IMG_FMT_NV12
    is defined.
  - New codec controls for the encoder:
    o AV1E_SET_AUTO_INTRA_TOOLS_OFF. Only in effect if
  - -deltaq-mode=3.
    o AV1E_SET_RTC_EXTERNAL_RC
    o AV1E_SET_FP_MT. Only supported if libaom is built with
  - DCONFIG_FRAME_PARALLEL_ENCODE=1.
    o AV1E_GET_TARGET_SEQ_LEVEL_IDX
  - New key-value pairs for the key-value API:
    o --auto-intra-tools-off=0 (default) or 1. Only in effect if
  - -deltaq-mode=3.
    o --strict-level-conformance=0 (default) or 1
    o --fp-mt=0 (default) or 1. Only supported if libaom is built
    with -DCONFIG_FRAME_PARALLEL_ENCODE=1.
  - New aomenc options (not supported by the key-value API):
    o --nv12
  * Compression Efficiency Improvements:
  - Correctly calculate SSE for high bitdepth in skip mode, 0.2%
    to 0.6% coding gain.
  - RTC at speed 9/10: BD-rate gain of ~4/5%
  - RTC screen content coding: many improvements for real-time
    screen at speed 10 (quality, speedup, and rate control), up
    to high resolutions (1080p).
  - RTC-SVC: fixes to make intra-only frames work for spatial
    layers.
  - RTC-SVC: quality improvements for temporal layers.
  - AV1 RT: A new passive rate control strategy for screen
    content, an average of 7.5% coding gain, with some clips of
    20+%. The feature is turned off by default due to higher bit
    rate variation.
  * Perceptual Quality Improvements:
  - RTC: Visual quality improvements for high speeds (9/10)
  - Improvements in coding quality for all intra mode
  * Speedup and Memory Optimizations:
  - ~10% speedup in good quality mode encoding.
  - ~7% heap memory reduction in good quality encoding mode for
    speed 5 and 6.
  - Ongoing improvements to intra-frame encoding performance on
    Arm
  - Faster encoding speed for "--deltaq-mode=3" mode.
  - ~10% speedup for speed 5/6, ~15% speedup for speed 7/8, and
    ~10% speedup for speed 9/10 in real time encoding mode
  - ~20% heap memory reduction in still-picture encoding mode for
    360p-720p resolutions with multiple threads
  - ~13% speedup for speed 6 and ~12% speedup for speed 9 in
    still-picture encoding mode.
  - Optimizations to improve multi-thread efficiency for
    still-picture encoding mode.
  * Bug Fixes:
  - b/204460717: README.md: replace master with main
  - b/210677928: libaom disable_order is surprising for
    max_reference_frames=3
  - b/222461449: -DCONFIG_TUNE_BUTTERAUGLI=1 broken
  - b/227207606: write_greyscale writes incorrect chroma in
    highbd mode
  - b/229955363: Integer-overflow in linsolve_wiener
  - https://crbug.com/aomedia/2032
  - https://crbug.com/aomedia/2397
  - https://crbug.com/aomedia/2563
  - https://crbug.com/aomedia/2815
  - https://crbug.com/aomedia/3009
  - https://crbug.com/aomedia/3018
  - https://crbug.com/aomedia/3045
  - https://crbug.com/aomedia/3101
  - https://crbug.com/aomedia/3130
  - https://crbug.com/aomedia/3173
  - https://crbug.com/aomedia/3184
  - https://crbug.com/aomedia/3187
  - https://crbug.com/aomedia/3190
  - https://crbug.com/aomedia/3195
  - https://crbug.com/aomedia/3197
  - https://crbug.com/aomedia/3201
  - https://crbug.com/aomedia/3202
  - https://crbug.com/aomedia/3204
  - https://crbug.com/aomedia/3205
  - https://crbug.com/aomedia/3207
  - https://crbug.com/aomedia/3208
  - https://crbug.com/aomedia/3209
  - https://crbug.com/aomedia/3213
  - https://crbug.com/aomedia/3214
  - https://crbug.com/aomedia/3219
  - https://crbug.com/aomedia/3222
  - https://crbug.com/aomedia/3223
  - https://crbug.com/aomedia/3225
  - https://crbug.com/aomedia/3226
  - https://crbug.com/aomedia/3228
  - https://crbug.com/aomedia/3232
  - https://crbug.com/aomedia/3236
  - https://crbug.com/aomedia/3237
  - https://crbug.com/aomedia/3238
  - https://crbug.com/aomedia/3240
  - https://crbug.com/aomedia/3243
  - https://crbug.com/aomedia/3244
  - https://crbug.com/aomedia/3246
  - https://crbug.com/aomedia/3248
  - https://crbug.com/aomedia/3250
  - https://crbug.com/aomedia/3251
  - https://crbug.com/aomedia/3252
  - https://crbug.com/aomedia/3255
  - https://crbug.com/aomedia/3257
  - https://crbug.com/aomedia/3259
  - https://crbug.com/aomedia/3260
  - https://crbug.com/aomedia/3267
  - https://crbug.com/aomedia/3268
  - https://crbug.com/aomedia/3269
  - https://crbug.com/aomedia/3276
  - https://crbug.com/aomedia/3278
  - https://crbug.com/chromium/1290068
  - https://crbug.com/chromium/1303237
  - https://crbug.com/chromium/1304990
  - https://crbug.com/chromium/1321141
  - https://crbug.com/chromium/1321388
  - https://crbug.com/oss-fuzz/44846
  - https://crbug.com/oss-fuzz/44856
  - https://crbug.com/oss-fuzz/44862
  - https://crbug.com/oss-fuzz/44904
  - https://crbug.com/oss-fuzz/45056</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663848000">- Update to version 3.5.0:
  * This release is ABI compatible with the last one, including
    speedup and memory optimizations, and new APIs and features.
  * New Features
  - Support for frame parallel encode for larger number of
    threads. --fp-mt flag is available for all build
    configurations.
  - New codec control AV1E_GET_NUM_OPERATING_POINTS
  * Speedup and Memory Optimizations
  - Speed-up multithreaded encoding for good quality mode for
    larger number of threads through frame parallel encoding:
    . 30-34% encode time reduction for 1080p, 16 threads, 1x1
    tile configuration (tile_rows x tile_columns)
    . 18-28% encode time reduction for 1080p, 16 threads, 2x4
    tile configuration
    . 18-20% encode time reduction for 2160p, 32 threads, 2x4
    tile configuration
  - 16-20% speed-up for speed=6 to 8 in still-picture encoding
    mode
  - 5-6% heap memory reduction for speed=6 to 10 in real-time
    encoding mode
  - Improvements to the speed for speed=7, 8 in real-time
    encoding mode
  - Improvements to the speed for speed=9, 10 in real-time screen
    encoding mode
  - Optimizations to improve multi-thread efficiency in real-time
    encoding mode
  - 10-15% speed up for SVC with temporal layers
  - SIMD optimizations:
    . Improve av1_quantize_fp_32x32_neon() 1.05x to 1.24x faster
    . Add aom_highbd_quantize_b{,_32x32,_64x64}_adaptive_neon()
    3.15x to 5.6x faster than "C"
    . Improve av1_quantize_fp_64x64_neon() 1.17x to 1.66x faster
    . Add aom_quantize_b_avx2() 1.4x to 1.7x faster than
    aom_quantize_b_avx()
    . Add aom_quantize_b_32x32_avx2() 1.4x to 2.3x faster than
    aom_quantize_b_32x32_avx()
    . Add aom_quantize_b_64x64_avx2() 2.0x to 2.4x faster than
    aom_quantize_b_64x64_ssse3()
    . Add aom_highbd_quantize_b_32x32_avx2() 9.0x to 10.5x faster
    than aom_highbd_quantize_b_32x32_c()
    . Add aom_highbd_quantize_b_64x64_avx2() 7.3x to 9.7x faster
    than aom_highbd_quantize_b_64x64_c()
    . Improve aom_highbd_quantize_b_avx2() 1.07x to 1.20x faster
    . Improve av1_quantize_fp_avx2() 1.13x to 1.49x faster
    . Improve av1_quantize_fp_32x32_avx2() 1.07x to 1.54x faster
    . Improve av1_quantize_fp_64x64_avx2()  1.03x to 1.25x faster
    . Improve av1_quantize_lp_avx2() 1.07x to 1.16x faster
  * Bug fixes including but not limited to
  - aomedia:3206 Assert that skip_width &gt; 0 for deconvolve
    function
  - aomedia:3278 row_mt enc: Delay top-right sync when intraBC is
    enabled
  - aomedia:3282 blend_a64_*_neon: fix bus error in armv7
  - aomedia:3283 FRAME_PARALLEL: Propagate border size to all
    cpis
  - aomedia:3283 RESIZE_MODE: Fix incorrect strides being used
    for motion search
  - aomedia:3286 rtc-svc: Fix to dynamic_enable spatial layers
  - aomedia:3289 rtc-screen: Fix to skipping inter-mode test in
    nonrd
  - aomedia:3289 rtc-screen: Fix for skip newmv on flat blocks
  - aomedia:3299 Fix build failure with CONFIG_TUNE_VMAF=1
  - aomedia:3296 Fix the conflict --enable-tx-size-search=0 with
    nonrd mode --enable-tx-size-search will be ignored in non-rd
    pick mode
  - aomedia:3304 Fix off-by-one error of max w/h in
    validate_config
  - aomedia:3306 Do not use pthread_setname_np on GNU/Hurd
  - aomedia:3325 row-multithreading produces invalid bitstream in
    some cases
  - chromium:1346938, chromium:1338114
  - compiler_flags.cmake: fix flag detection w/cmake 3.17-3.18.2
  - tools/*.py: update to python3
  - aom_configure.cmake: detect PIE and set CONFIG_PIC
  - test/simd_cmp_impl: use explicit types w/CompareSimd*
  - rtc: Fix to disable segm for aq-mode=3
  - rtc: Fix to color_sensitivity in variance partition
  - rtc-screen: Fix bsize in model rd computation for intra
    chroma
  - Fixes to ensure the correct behavior of the encoder
    algorithms (like segmentation, computation of statistics,
    etc.)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1675857600">- Update to version 3.6.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, and
    some new features. This release is ABI compatible with the last
    release.
  * New Features:
  - New values 20-27 (corresponding to levels 7.0-7.3 and
    8.0-8.3) for the encoder control
    AV1E_SET_TARGET_SEQ_LEVEL_IDX (note that the proposal to add
    the new levels are still in draft status). The original
    special value 24 (keep level stats only for level monitoring)
    is renumbered as 32.
  - New encoder control AV1E_SET_SKIP_POSTPROC_FILTERING to skip
    the application of post-processing filters on reconstructed
    frame in all intra mode.
  - New encoder option "kf-max-pyr-height": Maximum height of
    pyramid structure used for the GOP starting with a key frame
    (-1 to 5).
  - Make SVC work for screen content.
  - Rate control improvements to reduce frame-size spikes for
    screen content coding.
  - RISC-V architecture support with gcc toolchain.
  * Compression Efficiency Improvements:
  - Peak compression efficiency in VOD setting is improved by 1%.
  - 0.7% - 2.2% RTC encoding BDrate gains for real time speed 8
    to 10.
  - 15% RTC encoding BDrate gains for screen content speed 10.
  * Perceptual Quality Improvements:
  - Resolved a visual quality issue that was reported for high
    resolution clips (2K) for speed 4 and above in VOD use case.
  - Visual quality improvements to screen content coding.
  - Quality improvements to temporal layer RTC coding.
  * Speedup and Memory Optimizations:
  - RTC single-thread encoder speedup:
    . ~6% instruction count reduction for speed 5 and 6.
    . ~15% instruction count reduction for speed 7.
    . ~10% instruction count reduction for speed 8 to 10 (&gt;=360p
    resolutions).
  - RTC multi-thread encoder speedup (beyond single-thread
    speedup):
    . 5-8% encode time reduction for speed 7 to 10.
  - RTC screen-content encoder speedup:
    . 11% instruction count reduction for speed 9 and 10 (&gt;=720p
    resolutions).
  - ~5% reduction in heap memory requirements for RTC, speed 6 to
    10.
  * AVIF:
    . 4-5% speedup for speed 9 in still-picture encoding mode.
    . 3-4% heap memory reduction in still-picture encoding mode
    for 360p-720p resolutions with multiple threads.
  * Bug Fixes:
  - Added a workaround for an AV1 specification bug which makes
    TRANSLATION type global motion models unusable.
  - Fixed AddressSanitizer global-buffer-overflow errors in
    av1/encoder/arm/neon/av1_fwd_txfm2d_neon.c.
  - Fixed AddressSanitizer heap-buffer-overflow error in
    av1_wiener_convolve_add_src_neon().
  - chromium:1393384 Avoid scene detection on spatial resize.
  - aomedia:3308 Remove color artifacts under high motion.
  - aomedia:3310 Avoid out of memory failures with Visual Studio
    2017, 2019, and 2022 for Win32 x86 builds.
  - aomedia:3346 Make SVC work properly for screen content.
  - aomedia:3348 Fix a bug where an uninitialized search_site is
    used.
  - aomedia:3365 Work around what seems like a Visual Studio 2022
    compiler optimization bug.
  - aomedia:3369 Incorrect PSNR values reported by libaom for
    12-bit encode.
- Modernize spec, use cmake_build and ldconfig_scriptlets macros.</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to BSD-2-Clause and AOMPL-1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1683028800">- Revert to BSD-2-Clause licence tag to only use SPDX valid
  license tag.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683720000">- Update to version 3.6.1:
  * aomedia:2871: Guard the support of the 7.x and 8.x levels for
    AV1 under the CONFIG_CWG_C013 config flag, and only output the
    7.x and 8.x levels when explicitly requested.
  * aomedia:3382: Choose sb_size by ppi instead of svc.
  * aomedia:3384: Fix fullpel search limits.
  * aomedia:3388: Replace left shift of xq_active by
    multiplication.
  * aomedia:3389: Fix MV clamping in av1_mv_pred.
  * aomedia:3390: set_ld_layer_depth: cap max_layer_depth to
    MAX_ARF_LAYERS.
  * aomedia:3418: Fix MV clamping in av1_int_pro_motion_estimation.
  * aomedia:3429: Move lpf thread data init to
    lpf_pipeline_mt_init().
  * b:266719111: Fix undefined behavior in Arm Neon code.
  * b:269840681: nonrd_opt: align scan tables.
  * rtc: Fix is_key_frame setting in variance partition.
  * Build: Fix build with clang-cl and Visual Studio.</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1693569600">- New upstream release 3.7.0
  - New Features
  * New codec controls:
  * AV1E_SET_QUANTIZER_ONE_PASS: Set quantizer for each frame.
  * AV1E_ENABLE_RATE_GUIDE_DELTAQ: enable the rate distribution guided delta
    quantization in all intra mode. The "enable-rate-guide-deltaq" option is
    added for this control.
  * AV1E_SET_RATE_DISTRIBUTION_INFO: set the input file for rate
    distribution used in all intra mode. The "rate-distribution-info" option
    is added for this control.
  * AV1E_GET_LUMA_CDEF_STRENGTH
  * AV1E_SET_BITRATE_ONE_PASS_CBR
  * AOM_SCALING_MODE is extended to include 2/3 and 1/3 scaling.
  * aom_tune_metric is extended to include AOM_TUNE_VMAF_SALIENCY_MAP.
    The "tune" option is extended to include "vmaf_saliency_map".
  * SVC example encoder svc_encoder_rtc is able to use the rate control
    library.
  * Loopfilter level and CDEF filter level is supported by RTC rate control
    library.
  * New speed (--cpu-used) 11, intended for RTC screen sharing, added for
    faster encoding with ~3% bdrate loss with 16% IC (instruction count)
    speedup compared to speed 10.
  - Compression Efficiency Improvements
  * Improved VoD encoding performance
  * 0.1-0.6% BDrate gains for encoding speeds 2 to 6
  * Rate control accuracy improvement in VBR mode
  * RTC encoding improvements
  * Screen content mode: 10-19% BDrate gains for speeds 6 - 10
  * Temporal layers video mode, for speed 10:
  * 2 temporal layers on low resolutions: 13-15% BDrate gain
  * 3 temporal layers on VGA/HD: 3-4% BDrate gain
  - Perceptual Quality Improvements
  * Fixed multiple block and color artifacts for RTC screen content by
  * Incorporating color into RD cost for IDTX
  * Reducing thresholds for palette mode in non RD mode
  * Allowing more palette mode testing
  * Improved color sensitivity for altref in non-RD mode.
  * Reduced video flickering for temporal layer encoding.
  - Speedup and Memory Optimizations
  * Speed up the VoD encoder
  * 2-5% for encoding speed 2 to 4
  * 9-15% for encoding speed 5 to 6
  * ARM
  * Standard bitdepth
  * speed 5: +31%
  * speed 4: +2%
  * speed 3: +9%
  * speed 2: +157%
  * High bitdepth
  * speed 5: +85%
  * RTC speedups
  * Screen content mode
  * 15% IC speedup for speeds 6-8
  * ARM: 7% for speed 9, 3% for speed 10
  * Temporal layers video mode
  * 7% speedup for 3 temporal layers on VGA/HD, for speed 10
  * Single layer video
  * x86: 2% IC speedup for speeds 7-10
  * ARM: 2-4% speedup across speeds 5-10
  - Bug Fixes
  * aomedia:3261 Assertion failed when encoding av1 with film grain and
    '--monochrome' flag
  * aomedia:3276 ensure all allocations are checked (partial fix)
  * aomedia:3451 The libaom library calls exit()
  * aomedia:3450 enable -Wshadow for C++ sources
  * aomedia:3449 Test Seg Faults After
    b459af3e345be402db052a143fcc5383d4b74cbd
  * aomedia:3416 prune unused symbols / restrict symbol visibility
  * aomedia:3443 Jenkins failure:
    UninstantiatedParameterizedTestSuite&lt;EstimateNoiseTest&gt;
  * aomedia:3434 realtime failures with CONFIG_BITSTREAM_DEBUG=1
  * aomedia:3433 DeltaqModeTest crash w/row_mt=0
  * aomedia:3429 Encoder crash when turn on both ExternalResize and
    g_threads &gt; 2
  * aomedia:3438 Build failure with
    `-DSANITIZE=address -DBUILD_SHARED_LIBS=ON` when using clang.
  * aomedia:3435 Block artifacts when scrolling with AV1 in screen sharing
    scenarios
  * aomedia:3170 vmaf tune presets produce extreme glitches in one scene
  * aomedia:3401 Building shared libaom with MSVC results in a race condition
    with the export library
  * aomedia:3420 Floating point exception in av1_tpl_get_frame_importance()
  * aomedia:3424 heap-buffer-overflow in ScaleFilterCols_16_C() (SIGABRT)
  * aomedia:3417 examples/svc_encoder_rtc.c is using internal macros and
    functions
  * aomedia:3372 SEGV in assign_frame_buffer_p av1_common_int.h
  * aomedia:3130 'cpu-features.h' file not found on Android NDK 22
  * aomedia:3415 Encoder/decoder mismatch for svc_encoder_rtc running
    1 SL 3 TL
  * aomedia:3412 Lossless Mode Fails Loopback Bit Test
  * aomedia:3409 The use of AV1_VAR_OFFS in av1/encoder/var_based_part.c is
    incorrect for high bit depths
  * aomedia:3403 test_libaom fails with error message
    "feenableexcept() failed" on Linux arm
  * aomedia:3370 Random color block at fast motion area
  * aomedia:3393 Assertion failure in av1_convolve_2d_sr_c()
  * aomedia:3392 Strong artifacting for high bit-depth real-time
  * aomedia:3376 aomenc --threads=10 --deltaq-mode=3 crashes after
    "Allintra: multi-threading of calculating differential contrast"
  * aomedia:3380 Crashes and ASan and TSan errors in deltaq-mode=3
    multithreading code
  * chromium:1410766 heap-buffer-overflow in aom_yv12_copy_v_c
  * Cannot set level via AV1E_SET_TARGET_SEQ_LEVEL_IDX
  * Encoding failure due to the use of loop restoration with unintended use of
    lossless mode.
  * Signed integer overflow in scan_past_frames
  * Signed integer overflow in update_a_sep_sym
  * Flickering in AV1 1440p/2160p HDR transcodes
  * Fixed artifacts with screen share at encoder speed 10
  * Fixed prediction setup for IDTX
- Use system libraries instead of vendored ones
  * system-gtest.patch
  * system-yuv.patch
- Enable debuginfo also on modules written in assembly
- Enable building PowerPC-specific optimizations
- Enable Neon optimized code on ARM and fix runtime CPU detection
- Fix missing images in documentation</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1693915200">- Split docs to multibuild to avoid dependency cycle</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 3.7.1:
  * Bug Fixes:
  - aomedia:3349: heap overflow when increasing resolution
  - aomedia:3478: GCC 12.2.0 emits a -Wstringop-overflow warning
    on aom/av1/encoder/motion_search_facade.c
  - aomedia:3489: Detect encoder and image high bit depth
    mismatch
  - aomedia:3491: heap-buffer-overflow on frame size change
  - b/303023614:  Segfault at encoding time for high bit depth
    images
- Switch buildtime compression to zst.</changelog>
  <changelog author="pgajdos@suse.com" date="1718020800">- security update
- added patches
  fix CVE-2024-5171 [bsc#1226020], heap buffer overflow in img_alloc_helper() caused by integer overflow
  + libaom-CVE-2024-5171.patch</changelog>
</package>
<package pkgid="638e4c73fdc5d4980a285accdb89d1d2682e31700e0a01be5fa3223fab971fb9" name="aom-tools" arch="s390x">
  <version epoch="0" ver="3.7.1" rel="150600.3.3.1"/>
  <changelog author="elimat@opensuse.org" date="1614600000">- Update to version 2.0.2:
  * Prepare for the libaom v2.0.2 release
  * Call av1_setup_frame_size() when dropping a frame
  * Avoid memset in filter_intra_predictor module
  * Fix a typo bug in apply_temporal_filter_planewise
  * Modify the assertion in temporal filter intrinsics
  * Fix unit test ThreadTestLarge.EncoderResultTest/49
  * Add -Wimplicit-function-declaration as C flag only
  * Update CHANGELOG for libaom v2.0.1
  * Set allow_screen_content_tools to 0 in rt mode
  * chroma_check: don't access UV planes if monochrome</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620648000">- Update to version 3.1.0 (bsc#1185843):
  https://aomedia.googlesource.com/aom/+/refs/tags/v3.1.0
  This release adds an "all intra" mode to the encoder, which significantly
  speeds up the encoding of AVIF still images at speed 6.
  - Upgrading:
    All intra mode for encoding AVIF still images and AV1 all intra videos:
    AOM_USAGE_ALL_INTRA (2) can be passed as the 'usage' argument to
    aom_codec_enc_config_default().
    New encoder control IDs added:
  - AV1E_SET_ENABLE_DIAGONAL_INTRA: Enable diagonal (D45 to D203) intra
    prediction modes (0: false, 1: true (default)). Also available as
    "enable-diagonal-intra" for the aom_codec_set_option() function.
    New aom_tune_metric enum value: AOM_TUNE_BUTTERAUGLI. The new aomenc option
  - -tune=butteraugli was added to optimize the encoder’s perceptual quality by
    optimizing the Butteraugli metric. Install libjxl (JPEG XL) and then pass
  - DCONFIG_TUNE_BUTTERAUGLI=1 to the cmake command to enable it.
- Includes 3.0
  https://aomedia.googlesource.com/aom/+/refs/tags/v3.0.0
  This release includes compression efficiency improvement, speed improvement
  for realtime mode, as well as some new APIs.
  - Upgrading:
    Support for PSNR calculation based on stream bit-depth.
    New encoder control IDs added:
  - AV1E_SET_ENABLE_RECT_TX
  - AV1E_SET_VBR_CORPUS_COMPLEXITY_LAP
  - AV1E_GET_BASELINE_GF_INTERVAL
  - AV1E_SET_ENABLE_DNL_DENOISING
    New decoder control IDs added:
  - AOMD_GET_FWD_KF_PRESENT
  - AOMD_GET_FRAME_FLAGS
  - AOMD_GET_ALTREF_PRESENT
  - AOMD_GET_TILE_INFO
  - AOMD_GET_SCREEN_CONTENT_TOOLS_INFO
  - AOMD_GET_STILL_PICTURE
  - AOMD_GET_SB_SIZE
  - AOMD_GET_SHOW_EXISTING_FRAME_FLAG
  - AOMD_GET_S_FRAME_INFO
    New aom_tune_content enum value: AOM_CONTENT_FILM
    New aom_tune_metric enum value: AOM_TUNE_VMAF_NEG_MAX_GAIN
    Coefficient and mode update can be turned off via
    AV1E_SET_{COEFF/MODE}_COST_UPD_FREQ.
    New key &amp; value API added, available with aom_codec_set_option() function.
    Scaling API expanded to include 1/4, 3/4 and 1/8.
  - Enhancements:
    Better multithreading performance with realtime mode.
    New speed 9 setting for faster realtime encoding.
    Smaller binary size with low bitdepth and realtime only build.
    Temporal denoiser and its optimizations on x86 and Neon.
    Optimizations for scaling.
    Faster encoding with speed settings 2 to 6 for good encoding mode.
    Improved documentation throughout the library, with function level
    documentation, tree view and support for the dot tool.
  - Bug fixes:
    Aside from those mentioned in v2.0.1 and v2.0.2, this release includes the
    following bug fixes:
    Issue 2940: Segfault when encoding with --use-16bit-internal and --limit &gt; 1
    Issue 2941: Decoder mismatch with --rt --bit-depth=10 and --cpu-used=8
    Issue 2895: mingw-w64 i686 gcc fails to build
    Issue 2874: Separate ssse3 functions from sse2 file.</changelog>
  <changelog author="rpm@fthiessen.de" date="1625227200">- Update to version 3.1.1
  * Fix vmaf model initialization error when not set to tune=vmaf
  * Fix consistent crash on near-static screen content, keyframe
    related
  * Fix tune=butteraugli mode
- Disable NEON on arm where not available.</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- Update to version 3.1.2:
  * Update AUTHORS,CHANGELOG,CMakeLists.txt for v3.1.2
  * Avoid chroma resampling for 420mpeg2 input
  * Check array has two elements before using index 1
  * Fix DecodeScalabilityTest failure in realtime only
  * Store temporal_id and spatial_id of decoded frame
  * exports.cmake: use APPLE and WIN32 and use def for mingw-w64</changelog>
  <changelog author="pgajdos@suse.com" date="1629892801">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631188800">- security update
- added patches
  fix CVE-2021-30474 [bsc#1186799], aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
  + libaom-CVE-2021-30474.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633694400">- Update to version 3.1.3:
  * Update CHANGELOG for v3.1.3-rc2
  * Detect chroma subsampling more directly
  * Detect chroma subsampling more directly
  * image2yuvconfig() should calculate uv_crop_width
  * aom/aom_encoder.h: remove configure option reference
  * aom_encoder.h: fix rc_overshoot_pct range
  * Update AUTHORS,CHANGELOG,CMakeLists.txt for v3.1.3
  * aom_install: don't exclude msvc from install
  * aom_install: use relpath for install
  * aom_install: Install lib dlls to bindir</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634126400">- fix service data</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634299200">- Update to version 3.2.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, as well
    as some new features.
  * New Features:
    + Introduced speeds 7, 8, and 9 for all intra mode.
    + Introduced speed 10 for real time mode.
    + Introduced an API that allows external partition decisions.
    + SVC: added support for compound prediction.
    + SVC: added support for fixed SVC modes.
  * Compression Efficiency Improvements:
    + Intra-mode search improvement.
    + Improved real time (RT) mode BDrate savings by ~5% (RT speed
    5) and ~12% (RT speed 6). The improvement was measured on the
    video conference set.
    + Improved real time mode for nonrd path (speed 7, 8, 9):
    BDrate gains of ~3-5%.
    + Rate control and RD adjustments based on ML research in VP9.
    Gains of ~0.5-1.0% for HD.
  * Perceptual Quality Improvements:
    + Added a new mode --deltaq-mode=3 to improve perceptual
    quality based on a differential contrast model for still
    images.
    + Added a new mode –deltaq-mode=4 to improve perceptual quality
    based on user rated cq_level data set for still images.
    + Weighting of some intra mode and partition size choices to
    better manage and retain texture.
  * Speedup and Memory Optimizations:
    + Further improved 2-pass good quality encoder speed:
    . Speed 2 speedup: 18%
    . Speed 3 speedup: 22%
    . Speed 4 speedup: 37%
    . Speed 5 speedup: 30%
    . Speed 6 speedup: 20%
    + Optimized the real time encoder (measured on the video
    conference set):
    . RT speed 5 speedup: 110%
    . RT speed 6 speedup: 77%
  * Bug Fixes
    + Issue 3069: Fix one-pass mode keyframe placement off-by-one
    error.
    + Issue 3156: Fix a bug in av1_quantize_lp AVX2 optimization.
- Drop libaom-CVE-2021-30474.patch: Fixed upstream.
- Drop libaom-CVE-2021-30475.patch: Fixed upstream.
- Remove changesgenerate option from _service file, use data from
  CHANGELOG to fill .changes instead as it it much nicer and human
  readable than just a list of commit messages.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645185600">- Update to version 3.3.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, some
    new features, and several bug fixes.
  * New Features
  - AV1 RT: Introducing CDEF search level 5
  - Changed real time speed 4 to behave the same as real time
    speed 5
  - Add --deltaq-strength
  - rtc: Allow scene-change and overshoot detection for svc
  - rtc: Intra-only frame for svc
  - AV1 RT: Option 2 for codec control AV1E_SET_ENABLE_CDEF to
    disable CDEF on non-ref frames
  - New codec controls AV1E_SET_LOOPFILTER_CONTROL and
    AOME_GET_LOOPFILTER_LEVEL
  - Improvements to three pass encoding
  * Compression Efficiency Improvements: Overall compression gains:
    0.6%
  * Perceptual Quality Improvements
  - Improves the perceptual quality of high QP encoding for
    delta-q mode 4
  - Auto select noise synthesis level for all intra
  * Speedup and Memory Optimizations
  - Added many SSE2 optimizations.
  - Good quality 2-pass encoder speedups:
    o Speed 2: 9%
    o Speed 3: 12.5%
    o Speed 4: 8%
    o Speed 5: 3%
    o Speed 6: 4%
  - Real time mode encoder speedups:
    o Speed 5: 2.6% BDRate gain, 4% speedup
    o Speed 6: 3.5% BDRate gain, 4% speedup
    o Speed 9: 1% BDRate gain, 3% speedup
    o Speed 10: 3% BDRate gain, neutral speedup
  - All intra encoding speedups (AVIF):
    o Single thread - speed 6: 8%
    o Single thread - speed 9: 15%
    o Multi thread(8) - speed 6: 14%
    o Multi thread(8) - speed 9: 34%
  * Bug Fixes
  - Issue 3163: Segmentation fault when using
  - -enable-keyframe-filtering=2
  - Issue 2436: Integer overflow in av1_warp_affine_c()
  - Issue 3226: armv7 build failure due to gcc-11
  - Issue 3195: Bug report on libaom (AddressSanitizer:
    heap-buffer-overflow)
  - Issue 3191: Bug report on libaom (AddressSanitizer: SEGV on
    unknown address)
- Drop libaom-devel Requires from libaom-devel-doc sub-package: We
  do not need the devel package to be able to read the devel
  documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662292800">- Update to version 3.4.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, and
    some new features. There are no ABI or API breaking changes in
    this release.
  * New Features:
  - New --dist-metric flag with "qm-psnr" value to use
    quantization matrices in the distortion computation for RD
    search. The default value is "psnr".
  - New command line option "--auto-intra-tools-off=1" to make
    all-intra encoding faster for high bit rate under
    "--deltaq-mode=3" mode.
  - New rate control library aom_av1_rc for real-time hardware
    encoders. Supports CBR for both one spatial layer and SVC.
  - New image format AOM_IMG_FMT_NV12 can be used as input to the
    encoder. The presence of AOM_IMG_FMT_NV12 can be detected at
    compile time by checking if the macro AOM_HAVE_IMG_FMT_NV12
    is defined.
  - New codec controls for the encoder:
    o AV1E_SET_AUTO_INTRA_TOOLS_OFF. Only in effect if
  - -deltaq-mode=3.
    o AV1E_SET_RTC_EXTERNAL_RC
    o AV1E_SET_FP_MT. Only supported if libaom is built with
  - DCONFIG_FRAME_PARALLEL_ENCODE=1.
    o AV1E_GET_TARGET_SEQ_LEVEL_IDX
  - New key-value pairs for the key-value API:
    o --auto-intra-tools-off=0 (default) or 1. Only in effect if
  - -deltaq-mode=3.
    o --strict-level-conformance=0 (default) or 1
    o --fp-mt=0 (default) or 1. Only supported if libaom is built
    with -DCONFIG_FRAME_PARALLEL_ENCODE=1.
  - New aomenc options (not supported by the key-value API):
    o --nv12
  * Compression Efficiency Improvements:
  - Correctly calculate SSE for high bitdepth in skip mode, 0.2%
    to 0.6% coding gain.
  - RTC at speed 9/10: BD-rate gain of ~4/5%
  - RTC screen content coding: many improvements for real-time
    screen at speed 10 (quality, speedup, and rate control), up
    to high resolutions (1080p).
  - RTC-SVC: fixes to make intra-only frames work for spatial
    layers.
  - RTC-SVC: quality improvements for temporal layers.
  - AV1 RT: A new passive rate control strategy for screen
    content, an average of 7.5% coding gain, with some clips of
    20+%. The feature is turned off by default due to higher bit
    rate variation.
  * Perceptual Quality Improvements:
  - RTC: Visual quality improvements for high speeds (9/10)
  - Improvements in coding quality for all intra mode
  * Speedup and Memory Optimizations:
  - ~10% speedup in good quality mode encoding.
  - ~7% heap memory reduction in good quality encoding mode for
    speed 5 and 6.
  - Ongoing improvements to intra-frame encoding performance on
    Arm
  - Faster encoding speed for "--deltaq-mode=3" mode.
  - ~10% speedup for speed 5/6, ~15% speedup for speed 7/8, and
    ~10% speedup for speed 9/10 in real time encoding mode
  - ~20% heap memory reduction in still-picture encoding mode for
    360p-720p resolutions with multiple threads
  - ~13% speedup for speed 6 and ~12% speedup for speed 9 in
    still-picture encoding mode.
  - Optimizations to improve multi-thread efficiency for
    still-picture encoding mode.
  * Bug Fixes:
  - b/204460717: README.md: replace master with main
  - b/210677928: libaom disable_order is surprising for
    max_reference_frames=3
  - b/222461449: -DCONFIG_TUNE_BUTTERAUGLI=1 broken
  - b/227207606: write_greyscale writes incorrect chroma in
    highbd mode
  - b/229955363: Integer-overflow in linsolve_wiener
  - https://crbug.com/aomedia/2032
  - https://crbug.com/aomedia/2397
  - https://crbug.com/aomedia/2563
  - https://crbug.com/aomedia/2815
  - https://crbug.com/aomedia/3009
  - https://crbug.com/aomedia/3018
  - https://crbug.com/aomedia/3045
  - https://crbug.com/aomedia/3101
  - https://crbug.com/aomedia/3130
  - https://crbug.com/aomedia/3173
  - https://crbug.com/aomedia/3184
  - https://crbug.com/aomedia/3187
  - https://crbug.com/aomedia/3190
  - https://crbug.com/aomedia/3195
  - https://crbug.com/aomedia/3197
  - https://crbug.com/aomedia/3201
  - https://crbug.com/aomedia/3202
  - https://crbug.com/aomedia/3204
  - https://crbug.com/aomedia/3205
  - https://crbug.com/aomedia/3207
  - https://crbug.com/aomedia/3208
  - https://crbug.com/aomedia/3209
  - https://crbug.com/aomedia/3213
  - https://crbug.com/aomedia/3214
  - https://crbug.com/aomedia/3219
  - https://crbug.com/aomedia/3222
  - https://crbug.com/aomedia/3223
  - https://crbug.com/aomedia/3225
  - https://crbug.com/aomedia/3226
  - https://crbug.com/aomedia/3228
  - https://crbug.com/aomedia/3232
  - https://crbug.com/aomedia/3236
  - https://crbug.com/aomedia/3237
  - https://crbug.com/aomedia/3238
  - https://crbug.com/aomedia/3240
  - https://crbug.com/aomedia/3243
  - https://crbug.com/aomedia/3244
  - https://crbug.com/aomedia/3246
  - https://crbug.com/aomedia/3248
  - https://crbug.com/aomedia/3250
  - https://crbug.com/aomedia/3251
  - https://crbug.com/aomedia/3252
  - https://crbug.com/aomedia/3255
  - https://crbug.com/aomedia/3257
  - https://crbug.com/aomedia/3259
  - https://crbug.com/aomedia/3260
  - https://crbug.com/aomedia/3267
  - https://crbug.com/aomedia/3268
  - https://crbug.com/aomedia/3269
  - https://crbug.com/aomedia/3276
  - https://crbug.com/aomedia/3278
  - https://crbug.com/chromium/1290068
  - https://crbug.com/chromium/1303237
  - https://crbug.com/chromium/1304990
  - https://crbug.com/chromium/1321141
  - https://crbug.com/chromium/1321388
  - https://crbug.com/oss-fuzz/44846
  - https://crbug.com/oss-fuzz/44856
  - https://crbug.com/oss-fuzz/44862
  - https://crbug.com/oss-fuzz/44904
  - https://crbug.com/oss-fuzz/45056</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663848000">- Update to version 3.5.0:
  * This release is ABI compatible with the last one, including
    speedup and memory optimizations, and new APIs and features.
  * New Features
  - Support for frame parallel encode for larger number of
    threads. --fp-mt flag is available for all build
    configurations.
  - New codec control AV1E_GET_NUM_OPERATING_POINTS
  * Speedup and Memory Optimizations
  - Speed-up multithreaded encoding for good quality mode for
    larger number of threads through frame parallel encoding:
    . 30-34% encode time reduction for 1080p, 16 threads, 1x1
    tile configuration (tile_rows x tile_columns)
    . 18-28% encode time reduction for 1080p, 16 threads, 2x4
    tile configuration
    . 18-20% encode time reduction for 2160p, 32 threads, 2x4
    tile configuration
  - 16-20% speed-up for speed=6 to 8 in still-picture encoding
    mode
  - 5-6% heap memory reduction for speed=6 to 10 in real-time
    encoding mode
  - Improvements to the speed for speed=7, 8 in real-time
    encoding mode
  - Improvements to the speed for speed=9, 10 in real-time screen
    encoding mode
  - Optimizations to improve multi-thread efficiency in real-time
    encoding mode
  - 10-15% speed up for SVC with temporal layers
  - SIMD optimizations:
    . Improve av1_quantize_fp_32x32_neon() 1.05x to 1.24x faster
    . Add aom_highbd_quantize_b{,_32x32,_64x64}_adaptive_neon()
    3.15x to 5.6x faster than "C"
    . Improve av1_quantize_fp_64x64_neon() 1.17x to 1.66x faster
    . Add aom_quantize_b_avx2() 1.4x to 1.7x faster than
    aom_quantize_b_avx()
    . Add aom_quantize_b_32x32_avx2() 1.4x to 2.3x faster than
    aom_quantize_b_32x32_avx()
    . Add aom_quantize_b_64x64_avx2() 2.0x to 2.4x faster than
    aom_quantize_b_64x64_ssse3()
    . Add aom_highbd_quantize_b_32x32_avx2() 9.0x to 10.5x faster
    than aom_highbd_quantize_b_32x32_c()
    . Add aom_highbd_quantize_b_64x64_avx2() 7.3x to 9.7x faster
    than aom_highbd_quantize_b_64x64_c()
    . Improve aom_highbd_quantize_b_avx2() 1.07x to 1.20x faster
    . Improve av1_quantize_fp_avx2() 1.13x to 1.49x faster
    . Improve av1_quantize_fp_32x32_avx2() 1.07x to 1.54x faster
    . Improve av1_quantize_fp_64x64_avx2()  1.03x to 1.25x faster
    . Improve av1_quantize_lp_avx2() 1.07x to 1.16x faster
  * Bug fixes including but not limited to
  - aomedia:3206 Assert that skip_width &gt; 0 for deconvolve
    function
  - aomedia:3278 row_mt enc: Delay top-right sync when intraBC is
    enabled
  - aomedia:3282 blend_a64_*_neon: fix bus error in armv7
  - aomedia:3283 FRAME_PARALLEL: Propagate border size to all
    cpis
  - aomedia:3283 RESIZE_MODE: Fix incorrect strides being used
    for motion search
  - aomedia:3286 rtc-svc: Fix to dynamic_enable spatial layers
  - aomedia:3289 rtc-screen: Fix to skipping inter-mode test in
    nonrd
  - aomedia:3289 rtc-screen: Fix for skip newmv on flat blocks
  - aomedia:3299 Fix build failure with CONFIG_TUNE_VMAF=1
  - aomedia:3296 Fix the conflict --enable-tx-size-search=0 with
    nonrd mode --enable-tx-size-search will be ignored in non-rd
    pick mode
  - aomedia:3304 Fix off-by-one error of max w/h in
    validate_config
  - aomedia:3306 Do not use pthread_setname_np on GNU/Hurd
  - aomedia:3325 row-multithreading produces invalid bitstream in
    some cases
  - chromium:1346938, chromium:1338114
  - compiler_flags.cmake: fix flag detection w/cmake 3.17-3.18.2
  - tools/*.py: update to python3
  - aom_configure.cmake: detect PIE and set CONFIG_PIC
  - test/simd_cmp_impl: use explicit types w/CompareSimd*
  - rtc: Fix to disable segm for aq-mode=3
  - rtc: Fix to color_sensitivity in variance partition
  - rtc-screen: Fix bsize in model rd computation for intra
    chroma
  - Fixes to ensure the correct behavior of the encoder
    algorithms (like segmentation, computation of statistics,
    etc.)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1675857600">- Update to version 3.6.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, and
    some new features. This release is ABI compatible with the last
    release.
  * New Features:
  - New values 20-27 (corresponding to levels 7.0-7.3 and
    8.0-8.3) for the encoder control
    AV1E_SET_TARGET_SEQ_LEVEL_IDX (note that the proposal to add
    the new levels are still in draft status). The original
    special value 24 (keep level stats only for level monitoring)
    is renumbered as 32.
  - New encoder control AV1E_SET_SKIP_POSTPROC_FILTERING to skip
    the application of post-processing filters on reconstructed
    frame in all intra mode.
  - New encoder option "kf-max-pyr-height": Maximum height of
    pyramid structure used for the GOP starting with a key frame
    (-1 to 5).
  - Make SVC work for screen content.
  - Rate control improvements to reduce frame-size spikes for
    screen content coding.
  - RISC-V architecture support with gcc toolchain.
  * Compression Efficiency Improvements:
  - Peak compression efficiency in VOD setting is improved by 1%.
  - 0.7% - 2.2% RTC encoding BDrate gains for real time speed 8
    to 10.
  - 15% RTC encoding BDrate gains for screen content speed 10.
  * Perceptual Quality Improvements:
  - Resolved a visual quality issue that was reported for high
    resolution clips (2K) for speed 4 and above in VOD use case.
  - Visual quality improvements to screen content coding.
  - Quality improvements to temporal layer RTC coding.
  * Speedup and Memory Optimizations:
  - RTC single-thread encoder speedup:
    . ~6% instruction count reduction for speed 5 and 6.
    . ~15% instruction count reduction for speed 7.
    . ~10% instruction count reduction for speed 8 to 10 (&gt;=360p
    resolutions).
  - RTC multi-thread encoder speedup (beyond single-thread
    speedup):
    . 5-8% encode time reduction for speed 7 to 10.
  - RTC screen-content encoder speedup:
    . 11% instruction count reduction for speed 9 and 10 (&gt;=720p
    resolutions).
  - ~5% reduction in heap memory requirements for RTC, speed 6 to
    10.
  * AVIF:
    . 4-5% speedup for speed 9 in still-picture encoding mode.
    . 3-4% heap memory reduction in still-picture encoding mode
    for 360p-720p resolutions with multiple threads.
  * Bug Fixes:
  - Added a workaround for an AV1 specification bug which makes
    TRANSLATION type global motion models unusable.
  - Fixed AddressSanitizer global-buffer-overflow errors in
    av1/encoder/arm/neon/av1_fwd_txfm2d_neon.c.
  - Fixed AddressSanitizer heap-buffer-overflow error in
    av1_wiener_convolve_add_src_neon().
  - chromium:1393384 Avoid scene detection on spatial resize.
  - aomedia:3308 Remove color artifacts under high motion.
  - aomedia:3310 Avoid out of memory failures with Visual Studio
    2017, 2019, and 2022 for Win32 x86 builds.
  - aomedia:3346 Make SVC work properly for screen content.
  - aomedia:3348 Fix a bug where an uninitialized search_site is
    used.
  - aomedia:3365 Work around what seems like a Visual Studio 2022
    compiler optimization bug.
  - aomedia:3369 Incorrect PSNR values reported by libaom for
    12-bit encode.
- Modernize spec, use cmake_build and ldconfig_scriptlets macros.</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to BSD-2-Clause and AOMPL-1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1683028800">- Revert to BSD-2-Clause licence tag to only use SPDX valid
  license tag.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683720000">- Update to version 3.6.1:
  * aomedia:2871: Guard the support of the 7.x and 8.x levels for
    AV1 under the CONFIG_CWG_C013 config flag, and only output the
    7.x and 8.x levels when explicitly requested.
  * aomedia:3382: Choose sb_size by ppi instead of svc.
  * aomedia:3384: Fix fullpel search limits.
  * aomedia:3388: Replace left shift of xq_active by
    multiplication.
  * aomedia:3389: Fix MV clamping in av1_mv_pred.
  * aomedia:3390: set_ld_layer_depth: cap max_layer_depth to
    MAX_ARF_LAYERS.
  * aomedia:3418: Fix MV clamping in av1_int_pro_motion_estimation.
  * aomedia:3429: Move lpf thread data init to
    lpf_pipeline_mt_init().
  * b:266719111: Fix undefined behavior in Arm Neon code.
  * b:269840681: nonrd_opt: align scan tables.
  * rtc: Fix is_key_frame setting in variance partition.
  * Build: Fix build with clang-cl and Visual Studio.</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1693569600">- New upstream release 3.7.0
  - New Features
  * New codec controls:
  * AV1E_SET_QUANTIZER_ONE_PASS: Set quantizer for each frame.
  * AV1E_ENABLE_RATE_GUIDE_DELTAQ: enable the rate distribution guided delta
    quantization in all intra mode. The "enable-rate-guide-deltaq" option is
    added for this control.
  * AV1E_SET_RATE_DISTRIBUTION_INFO: set the input file for rate
    distribution used in all intra mode. The "rate-distribution-info" option
    is added for this control.
  * AV1E_GET_LUMA_CDEF_STRENGTH
  * AV1E_SET_BITRATE_ONE_PASS_CBR
  * AOM_SCALING_MODE is extended to include 2/3 and 1/3 scaling.
  * aom_tune_metric is extended to include AOM_TUNE_VMAF_SALIENCY_MAP.
    The "tune" option is extended to include "vmaf_saliency_map".
  * SVC example encoder svc_encoder_rtc is able to use the rate control
    library.
  * Loopfilter level and CDEF filter level is supported by RTC rate control
    library.
  * New speed (--cpu-used) 11, intended for RTC screen sharing, added for
    faster encoding with ~3% bdrate loss with 16% IC (instruction count)
    speedup compared to speed 10.
  - Compression Efficiency Improvements
  * Improved VoD encoding performance
  * 0.1-0.6% BDrate gains for encoding speeds 2 to 6
  * Rate control accuracy improvement in VBR mode
  * RTC encoding improvements
  * Screen content mode: 10-19% BDrate gains for speeds 6 - 10
  * Temporal layers video mode, for speed 10:
  * 2 temporal layers on low resolutions: 13-15% BDrate gain
  * 3 temporal layers on VGA/HD: 3-4% BDrate gain
  - Perceptual Quality Improvements
  * Fixed multiple block and color artifacts for RTC screen content by
  * Incorporating color into RD cost for IDTX
  * Reducing thresholds for palette mode in non RD mode
  * Allowing more palette mode testing
  * Improved color sensitivity for altref in non-RD mode.
  * Reduced video flickering for temporal layer encoding.
  - Speedup and Memory Optimizations
  * Speed up the VoD encoder
  * 2-5% for encoding speed 2 to 4
  * 9-15% for encoding speed 5 to 6
  * ARM
  * Standard bitdepth
  * speed 5: +31%
  * speed 4: +2%
  * speed 3: +9%
  * speed 2: +157%
  * High bitdepth
  * speed 5: +85%
  * RTC speedups
  * Screen content mode
  * 15% IC speedup for speeds 6-8
  * ARM: 7% for speed 9, 3% for speed 10
  * Temporal layers video mode
  * 7% speedup for 3 temporal layers on VGA/HD, for speed 10
  * Single layer video
  * x86: 2% IC speedup for speeds 7-10
  * ARM: 2-4% speedup across speeds 5-10
  - Bug Fixes
  * aomedia:3261 Assertion failed when encoding av1 with film grain and
    '--monochrome' flag
  * aomedia:3276 ensure all allocations are checked (partial fix)
  * aomedia:3451 The libaom library calls exit()
  * aomedia:3450 enable -Wshadow for C++ sources
  * aomedia:3449 Test Seg Faults After
    b459af3e345be402db052a143fcc5383d4b74cbd
  * aomedia:3416 prune unused symbols / restrict symbol visibility
  * aomedia:3443 Jenkins failure:
    UninstantiatedParameterizedTestSuite&lt;EstimateNoiseTest&gt;
  * aomedia:3434 realtime failures with CONFIG_BITSTREAM_DEBUG=1
  * aomedia:3433 DeltaqModeTest crash w/row_mt=0
  * aomedia:3429 Encoder crash when turn on both ExternalResize and
    g_threads &gt; 2
  * aomedia:3438 Build failure with
    `-DSANITIZE=address -DBUILD_SHARED_LIBS=ON` when using clang.
  * aomedia:3435 Block artifacts when scrolling with AV1 in screen sharing
    scenarios
  * aomedia:3170 vmaf tune presets produce extreme glitches in one scene
  * aomedia:3401 Building shared libaom with MSVC results in a race condition
    with the export library
  * aomedia:3420 Floating point exception in av1_tpl_get_frame_importance()
  * aomedia:3424 heap-buffer-overflow in ScaleFilterCols_16_C() (SIGABRT)
  * aomedia:3417 examples/svc_encoder_rtc.c is using internal macros and
    functions
  * aomedia:3372 SEGV in assign_frame_buffer_p av1_common_int.h
  * aomedia:3130 'cpu-features.h' file not found on Android NDK 22
  * aomedia:3415 Encoder/decoder mismatch for svc_encoder_rtc running
    1 SL 3 TL
  * aomedia:3412 Lossless Mode Fails Loopback Bit Test
  * aomedia:3409 The use of AV1_VAR_OFFS in av1/encoder/var_based_part.c is
    incorrect for high bit depths
  * aomedia:3403 test_libaom fails with error message
    "feenableexcept() failed" on Linux arm
  * aomedia:3370 Random color block at fast motion area
  * aomedia:3393 Assertion failure in av1_convolve_2d_sr_c()
  * aomedia:3392 Strong artifacting for high bit-depth real-time
  * aomedia:3376 aomenc --threads=10 --deltaq-mode=3 crashes after
    "Allintra: multi-threading of calculating differential contrast"
  * aomedia:3380 Crashes and ASan and TSan errors in deltaq-mode=3
    multithreading code
  * chromium:1410766 heap-buffer-overflow in aom_yv12_copy_v_c
  * Cannot set level via AV1E_SET_TARGET_SEQ_LEVEL_IDX
  * Encoding failure due to the use of loop restoration with unintended use of
    lossless mode.
  * Signed integer overflow in scan_past_frames
  * Signed integer overflow in update_a_sep_sym
  * Flickering in AV1 1440p/2160p HDR transcodes
  * Fixed artifacts with screen share at encoder speed 10
  * Fixed prediction setup for IDTX
- Use system libraries instead of vendored ones
  * system-gtest.patch
  * system-yuv.patch
- Enable debuginfo also on modules written in assembly
- Enable building PowerPC-specific optimizations
- Enable Neon optimized code on ARM and fix runtime CPU detection
- Fix missing images in documentation</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1693915200">- Split docs to multibuild to avoid dependency cycle</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 3.7.1:
  * Bug Fixes:
  - aomedia:3349: heap overflow when increasing resolution
  - aomedia:3478: GCC 12.2.0 emits a -Wstringop-overflow warning
    on aom/av1/encoder/motion_search_facade.c
  - aomedia:3489: Detect encoder and image high bit depth
    mismatch
  - aomedia:3491: heap-buffer-overflow on frame size change
  - b/303023614:  Segfault at encoding time for high bit depth
    images
- Switch buildtime compression to zst.</changelog>
  <changelog author="pgajdos@suse.com" date="1718020800">- security update
- added patches
  fix CVE-2024-5171 [bsc#1226020], heap buffer overflow in img_alloc_helper() caused by integer overflow
  + libaom-CVE-2024-5171.patch</changelog>
</package>
<package pkgid="3df6b07cf2a833fdcdac2fe0c4bf3953e2c9bdc2b2933a9300882758d6bec87b" name="aom-tools" arch="x86_64">
  <version epoch="0" ver="3.7.1" rel="150600.3.3.1"/>
  <changelog author="elimat@opensuse.org" date="1614600000">- Update to version 2.0.2:
  * Prepare for the libaom v2.0.2 release
  * Call av1_setup_frame_size() when dropping a frame
  * Avoid memset in filter_intra_predictor module
  * Fix a typo bug in apply_temporal_filter_planewise
  * Modify the assertion in temporal filter intrinsics
  * Fix unit test ThreadTestLarge.EncoderResultTest/49
  * Add -Wimplicit-function-declaration as C flag only
  * Update CHANGELOG for libaom v2.0.1
  * Set allow_screen_content_tools to 0 in rt mode
  * chroma_check: don't access UV planes if monochrome</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620648000">- Update to version 3.1.0 (bsc#1185843):
  https://aomedia.googlesource.com/aom/+/refs/tags/v3.1.0
  This release adds an "all intra" mode to the encoder, which significantly
  speeds up the encoding of AVIF still images at speed 6.
  - Upgrading:
    All intra mode for encoding AVIF still images and AV1 all intra videos:
    AOM_USAGE_ALL_INTRA (2) can be passed as the 'usage' argument to
    aom_codec_enc_config_default().
    New encoder control IDs added:
  - AV1E_SET_ENABLE_DIAGONAL_INTRA: Enable diagonal (D45 to D203) intra
    prediction modes (0: false, 1: true (default)). Also available as
    "enable-diagonal-intra" for the aom_codec_set_option() function.
    New aom_tune_metric enum value: AOM_TUNE_BUTTERAUGLI. The new aomenc option
  - -tune=butteraugli was added to optimize the encoder’s perceptual quality by
    optimizing the Butteraugli metric. Install libjxl (JPEG XL) and then pass
  - DCONFIG_TUNE_BUTTERAUGLI=1 to the cmake command to enable it.
- Includes 3.0
  https://aomedia.googlesource.com/aom/+/refs/tags/v3.0.0
  This release includes compression efficiency improvement, speed improvement
  for realtime mode, as well as some new APIs.
  - Upgrading:
    Support for PSNR calculation based on stream bit-depth.
    New encoder control IDs added:
  - AV1E_SET_ENABLE_RECT_TX
  - AV1E_SET_VBR_CORPUS_COMPLEXITY_LAP
  - AV1E_GET_BASELINE_GF_INTERVAL
  - AV1E_SET_ENABLE_DNL_DENOISING
    New decoder control IDs added:
  - AOMD_GET_FWD_KF_PRESENT
  - AOMD_GET_FRAME_FLAGS
  - AOMD_GET_ALTREF_PRESENT
  - AOMD_GET_TILE_INFO
  - AOMD_GET_SCREEN_CONTENT_TOOLS_INFO
  - AOMD_GET_STILL_PICTURE
  - AOMD_GET_SB_SIZE
  - AOMD_GET_SHOW_EXISTING_FRAME_FLAG
  - AOMD_GET_S_FRAME_INFO
    New aom_tune_content enum value: AOM_CONTENT_FILM
    New aom_tune_metric enum value: AOM_TUNE_VMAF_NEG_MAX_GAIN
    Coefficient and mode update can be turned off via
    AV1E_SET_{COEFF/MODE}_COST_UPD_FREQ.
    New key &amp; value API added, available with aom_codec_set_option() function.
    Scaling API expanded to include 1/4, 3/4 and 1/8.
  - Enhancements:
    Better multithreading performance with realtime mode.
    New speed 9 setting for faster realtime encoding.
    Smaller binary size with low bitdepth and realtime only build.
    Temporal denoiser and its optimizations on x86 and Neon.
    Optimizations for scaling.
    Faster encoding with speed settings 2 to 6 for good encoding mode.
    Improved documentation throughout the library, with function level
    documentation, tree view and support for the dot tool.
  - Bug fixes:
    Aside from those mentioned in v2.0.1 and v2.0.2, this release includes the
    following bug fixes:
    Issue 2940: Segfault when encoding with --use-16bit-internal and --limit &gt; 1
    Issue 2941: Decoder mismatch with --rt --bit-depth=10 and --cpu-used=8
    Issue 2895: mingw-w64 i686 gcc fails to build
    Issue 2874: Separate ssse3 functions from sse2 file.</changelog>
  <changelog author="rpm@fthiessen.de" date="1625227200">- Update to version 3.1.1
  * Fix vmaf model initialization error when not set to tune=vmaf
  * Fix consistent crash on near-static screen content, keyframe
    related
  * Fix tune=butteraugli mode
- Disable NEON on arm where not available.</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- Update to version 3.1.2:
  * Update AUTHORS,CHANGELOG,CMakeLists.txt for v3.1.2
  * Avoid chroma resampling for 420mpeg2 input
  * Check array has two elements before using index 1
  * Fix DecodeScalabilityTest failure in realtime only
  * Store temporal_id and spatial_id of decoded frame
  * exports.cmake: use APPLE and WIN32 and use def for mingw-w64</changelog>
  <changelog author="pgajdos@suse.com" date="1629892801">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631188800">- security update
- added patches
  fix CVE-2021-30474 [bsc#1186799], aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
  + libaom-CVE-2021-30474.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633694400">- Update to version 3.1.3:
  * Update CHANGELOG for v3.1.3-rc2
  * Detect chroma subsampling more directly
  * Detect chroma subsampling more directly
  * image2yuvconfig() should calculate uv_crop_width
  * aom/aom_encoder.h: remove configure option reference
  * aom_encoder.h: fix rc_overshoot_pct range
  * Update AUTHORS,CHANGELOG,CMakeLists.txt for v3.1.3
  * aom_install: don't exclude msvc from install
  * aom_install: use relpath for install
  * aom_install: Install lib dlls to bindir</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634126400">- fix service data</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634299200">- Update to version 3.2.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, as well
    as some new features.
  * New Features:
    + Introduced speeds 7, 8, and 9 for all intra mode.
    + Introduced speed 10 for real time mode.
    + Introduced an API that allows external partition decisions.
    + SVC: added support for compound prediction.
    + SVC: added support for fixed SVC modes.
  * Compression Efficiency Improvements:
    + Intra-mode search improvement.
    + Improved real time (RT) mode BDrate savings by ~5% (RT speed
    5) and ~12% (RT speed 6). The improvement was measured on the
    video conference set.
    + Improved real time mode for nonrd path (speed 7, 8, 9):
    BDrate gains of ~3-5%.
    + Rate control and RD adjustments based on ML research in VP9.
    Gains of ~0.5-1.0% for HD.
  * Perceptual Quality Improvements:
    + Added a new mode --deltaq-mode=3 to improve perceptual
    quality based on a differential contrast model for still
    images.
    + Added a new mode –deltaq-mode=4 to improve perceptual quality
    based on user rated cq_level data set for still images.
    + Weighting of some intra mode and partition size choices to
    better manage and retain texture.
  * Speedup and Memory Optimizations:
    + Further improved 2-pass good quality encoder speed:
    . Speed 2 speedup: 18%
    . Speed 3 speedup: 22%
    . Speed 4 speedup: 37%
    . Speed 5 speedup: 30%
    . Speed 6 speedup: 20%
    + Optimized the real time encoder (measured on the video
    conference set):
    . RT speed 5 speedup: 110%
    . RT speed 6 speedup: 77%
  * Bug Fixes
    + Issue 3069: Fix one-pass mode keyframe placement off-by-one
    error.
    + Issue 3156: Fix a bug in av1_quantize_lp AVX2 optimization.
- Drop libaom-CVE-2021-30474.patch: Fixed upstream.
- Drop libaom-CVE-2021-30475.patch: Fixed upstream.
- Remove changesgenerate option from _service file, use data from
  CHANGELOG to fill .changes instead as it it much nicer and human
  readable than just a list of commit messages.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645185600">- Update to version 3.3.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, some
    new features, and several bug fixes.
  * New Features
  - AV1 RT: Introducing CDEF search level 5
  - Changed real time speed 4 to behave the same as real time
    speed 5
  - Add --deltaq-strength
  - rtc: Allow scene-change and overshoot detection for svc
  - rtc: Intra-only frame for svc
  - AV1 RT: Option 2 for codec control AV1E_SET_ENABLE_CDEF to
    disable CDEF on non-ref frames
  - New codec controls AV1E_SET_LOOPFILTER_CONTROL and
    AOME_GET_LOOPFILTER_LEVEL
  - Improvements to three pass encoding
  * Compression Efficiency Improvements: Overall compression gains:
    0.6%
  * Perceptual Quality Improvements
  - Improves the perceptual quality of high QP encoding for
    delta-q mode 4
  - Auto select noise synthesis level for all intra
  * Speedup and Memory Optimizations
  - Added many SSE2 optimizations.
  - Good quality 2-pass encoder speedups:
    o Speed 2: 9%
    o Speed 3: 12.5%
    o Speed 4: 8%
    o Speed 5: 3%
    o Speed 6: 4%
  - Real time mode encoder speedups:
    o Speed 5: 2.6% BDRate gain, 4% speedup
    o Speed 6: 3.5% BDRate gain, 4% speedup
    o Speed 9: 1% BDRate gain, 3% speedup
    o Speed 10: 3% BDRate gain, neutral speedup
  - All intra encoding speedups (AVIF):
    o Single thread - speed 6: 8%
    o Single thread - speed 9: 15%
    o Multi thread(8) - speed 6: 14%
    o Multi thread(8) - speed 9: 34%
  * Bug Fixes
  - Issue 3163: Segmentation fault when using
  - -enable-keyframe-filtering=2
  - Issue 2436: Integer overflow in av1_warp_affine_c()
  - Issue 3226: armv7 build failure due to gcc-11
  - Issue 3195: Bug report on libaom (AddressSanitizer:
    heap-buffer-overflow)
  - Issue 3191: Bug report on libaom (AddressSanitizer: SEGV on
    unknown address)
- Drop libaom-devel Requires from libaom-devel-doc sub-package: We
  do not need the devel package to be able to read the devel
  documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662292800">- Update to version 3.4.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, and
    some new features. There are no ABI or API breaking changes in
    this release.
  * New Features:
  - New --dist-metric flag with "qm-psnr" value to use
    quantization matrices in the distortion computation for RD
    search. The default value is "psnr".
  - New command line option "--auto-intra-tools-off=1" to make
    all-intra encoding faster for high bit rate under
    "--deltaq-mode=3" mode.
  - New rate control library aom_av1_rc for real-time hardware
    encoders. Supports CBR for both one spatial layer and SVC.
  - New image format AOM_IMG_FMT_NV12 can be used as input to the
    encoder. The presence of AOM_IMG_FMT_NV12 can be detected at
    compile time by checking if the macro AOM_HAVE_IMG_FMT_NV12
    is defined.
  - New codec controls for the encoder:
    o AV1E_SET_AUTO_INTRA_TOOLS_OFF. Only in effect if
  - -deltaq-mode=3.
    o AV1E_SET_RTC_EXTERNAL_RC
    o AV1E_SET_FP_MT. Only supported if libaom is built with
  - DCONFIG_FRAME_PARALLEL_ENCODE=1.
    o AV1E_GET_TARGET_SEQ_LEVEL_IDX
  - New key-value pairs for the key-value API:
    o --auto-intra-tools-off=0 (default) or 1. Only in effect if
  - -deltaq-mode=3.
    o --strict-level-conformance=0 (default) or 1
    o --fp-mt=0 (default) or 1. Only supported if libaom is built
    with -DCONFIG_FRAME_PARALLEL_ENCODE=1.
  - New aomenc options (not supported by the key-value API):
    o --nv12
  * Compression Efficiency Improvements:
  - Correctly calculate SSE for high bitdepth in skip mode, 0.2%
    to 0.6% coding gain.
  - RTC at speed 9/10: BD-rate gain of ~4/5%
  - RTC screen content coding: many improvements for real-time
    screen at speed 10 (quality, speedup, and rate control), up
    to high resolutions (1080p).
  - RTC-SVC: fixes to make intra-only frames work for spatial
    layers.
  - RTC-SVC: quality improvements for temporal layers.
  - AV1 RT: A new passive rate control strategy for screen
    content, an average of 7.5% coding gain, with some clips of
    20+%. The feature is turned off by default due to higher bit
    rate variation.
  * Perceptual Quality Improvements:
  - RTC: Visual quality improvements for high speeds (9/10)
  - Improvements in coding quality for all intra mode
  * Speedup and Memory Optimizations:
  - ~10% speedup in good quality mode encoding.
  - ~7% heap memory reduction in good quality encoding mode for
    speed 5 and 6.
  - Ongoing improvements to intra-frame encoding performance on
    Arm
  - Faster encoding speed for "--deltaq-mode=3" mode.
  - ~10% speedup for speed 5/6, ~15% speedup for speed 7/8, and
    ~10% speedup for speed 9/10 in real time encoding mode
  - ~20% heap memory reduction in still-picture encoding mode for
    360p-720p resolutions with multiple threads
  - ~13% speedup for speed 6 and ~12% speedup for speed 9 in
    still-picture encoding mode.
  - Optimizations to improve multi-thread efficiency for
    still-picture encoding mode.
  * Bug Fixes:
  - b/204460717: README.md: replace master with main
  - b/210677928: libaom disable_order is surprising for
    max_reference_frames=3
  - b/222461449: -DCONFIG_TUNE_BUTTERAUGLI=1 broken
  - b/227207606: write_greyscale writes incorrect chroma in
    highbd mode
  - b/229955363: Integer-overflow in linsolve_wiener
  - https://crbug.com/aomedia/2032
  - https://crbug.com/aomedia/2397
  - https://crbug.com/aomedia/2563
  - https://crbug.com/aomedia/2815
  - https://crbug.com/aomedia/3009
  - https://crbug.com/aomedia/3018
  - https://crbug.com/aomedia/3045
  - https://crbug.com/aomedia/3101
  - https://crbug.com/aomedia/3130
  - https://crbug.com/aomedia/3173
  - https://crbug.com/aomedia/3184
  - https://crbug.com/aomedia/3187
  - https://crbug.com/aomedia/3190
  - https://crbug.com/aomedia/3195
  - https://crbug.com/aomedia/3197
  - https://crbug.com/aomedia/3201
  - https://crbug.com/aomedia/3202
  - https://crbug.com/aomedia/3204
  - https://crbug.com/aomedia/3205
  - https://crbug.com/aomedia/3207
  - https://crbug.com/aomedia/3208
  - https://crbug.com/aomedia/3209
  - https://crbug.com/aomedia/3213
  - https://crbug.com/aomedia/3214
  - https://crbug.com/aomedia/3219
  - https://crbug.com/aomedia/3222
  - https://crbug.com/aomedia/3223
  - https://crbug.com/aomedia/3225
  - https://crbug.com/aomedia/3226
  - https://crbug.com/aomedia/3228
  - https://crbug.com/aomedia/3232
  - https://crbug.com/aomedia/3236
  - https://crbug.com/aomedia/3237
  - https://crbug.com/aomedia/3238
  - https://crbug.com/aomedia/3240
  - https://crbug.com/aomedia/3243
  - https://crbug.com/aomedia/3244
  - https://crbug.com/aomedia/3246
  - https://crbug.com/aomedia/3248
  - https://crbug.com/aomedia/3250
  - https://crbug.com/aomedia/3251
  - https://crbug.com/aomedia/3252
  - https://crbug.com/aomedia/3255
  - https://crbug.com/aomedia/3257
  - https://crbug.com/aomedia/3259
  - https://crbug.com/aomedia/3260
  - https://crbug.com/aomedia/3267
  - https://crbug.com/aomedia/3268
  - https://crbug.com/aomedia/3269
  - https://crbug.com/aomedia/3276
  - https://crbug.com/aomedia/3278
  - https://crbug.com/chromium/1290068
  - https://crbug.com/chromium/1303237
  - https://crbug.com/chromium/1304990
  - https://crbug.com/chromium/1321141
  - https://crbug.com/chromium/1321388
  - https://crbug.com/oss-fuzz/44846
  - https://crbug.com/oss-fuzz/44856
  - https://crbug.com/oss-fuzz/44862
  - https://crbug.com/oss-fuzz/44904
  - https://crbug.com/oss-fuzz/45056</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663848000">- Update to version 3.5.0:
  * This release is ABI compatible with the last one, including
    speedup and memory optimizations, and new APIs and features.
  * New Features
  - Support for frame parallel encode for larger number of
    threads. --fp-mt flag is available for all build
    configurations.
  - New codec control AV1E_GET_NUM_OPERATING_POINTS
  * Speedup and Memory Optimizations
  - Speed-up multithreaded encoding for good quality mode for
    larger number of threads through frame parallel encoding:
    . 30-34% encode time reduction for 1080p, 16 threads, 1x1
    tile configuration (tile_rows x tile_columns)
    . 18-28% encode time reduction for 1080p, 16 threads, 2x4
    tile configuration
    . 18-20% encode time reduction for 2160p, 32 threads, 2x4
    tile configuration
  - 16-20% speed-up for speed=6 to 8 in still-picture encoding
    mode
  - 5-6% heap memory reduction for speed=6 to 10 in real-time
    encoding mode
  - Improvements to the speed for speed=7, 8 in real-time
    encoding mode
  - Improvements to the speed for speed=9, 10 in real-time screen
    encoding mode
  - Optimizations to improve multi-thread efficiency in real-time
    encoding mode
  - 10-15% speed up for SVC with temporal layers
  - SIMD optimizations:
    . Improve av1_quantize_fp_32x32_neon() 1.05x to 1.24x faster
    . Add aom_highbd_quantize_b{,_32x32,_64x64}_adaptive_neon()
    3.15x to 5.6x faster than "C"
    . Improve av1_quantize_fp_64x64_neon() 1.17x to 1.66x faster
    . Add aom_quantize_b_avx2() 1.4x to 1.7x faster than
    aom_quantize_b_avx()
    . Add aom_quantize_b_32x32_avx2() 1.4x to 2.3x faster than
    aom_quantize_b_32x32_avx()
    . Add aom_quantize_b_64x64_avx2() 2.0x to 2.4x faster than
    aom_quantize_b_64x64_ssse3()
    . Add aom_highbd_quantize_b_32x32_avx2() 9.0x to 10.5x faster
    than aom_highbd_quantize_b_32x32_c()
    . Add aom_highbd_quantize_b_64x64_avx2() 7.3x to 9.7x faster
    than aom_highbd_quantize_b_64x64_c()
    . Improve aom_highbd_quantize_b_avx2() 1.07x to 1.20x faster
    . Improve av1_quantize_fp_avx2() 1.13x to 1.49x faster
    . Improve av1_quantize_fp_32x32_avx2() 1.07x to 1.54x faster
    . Improve av1_quantize_fp_64x64_avx2()  1.03x to 1.25x faster
    . Improve av1_quantize_lp_avx2() 1.07x to 1.16x faster
  * Bug fixes including but not limited to
  - aomedia:3206 Assert that skip_width &gt; 0 for deconvolve
    function
  - aomedia:3278 row_mt enc: Delay top-right sync when intraBC is
    enabled
  - aomedia:3282 blend_a64_*_neon: fix bus error in armv7
  - aomedia:3283 FRAME_PARALLEL: Propagate border size to all
    cpis
  - aomedia:3283 RESIZE_MODE: Fix incorrect strides being used
    for motion search
  - aomedia:3286 rtc-svc: Fix to dynamic_enable spatial layers
  - aomedia:3289 rtc-screen: Fix to skipping inter-mode test in
    nonrd
  - aomedia:3289 rtc-screen: Fix for skip newmv on flat blocks
  - aomedia:3299 Fix build failure with CONFIG_TUNE_VMAF=1
  - aomedia:3296 Fix the conflict --enable-tx-size-search=0 with
    nonrd mode --enable-tx-size-search will be ignored in non-rd
    pick mode
  - aomedia:3304 Fix off-by-one error of max w/h in
    validate_config
  - aomedia:3306 Do not use pthread_setname_np on GNU/Hurd
  - aomedia:3325 row-multithreading produces invalid bitstream in
    some cases
  - chromium:1346938, chromium:1338114
  - compiler_flags.cmake: fix flag detection w/cmake 3.17-3.18.2
  - tools/*.py: update to python3
  - aom_configure.cmake: detect PIE and set CONFIG_PIC
  - test/simd_cmp_impl: use explicit types w/CompareSimd*
  - rtc: Fix to disable segm for aq-mode=3
  - rtc: Fix to color_sensitivity in variance partition
  - rtc-screen: Fix bsize in model rd computation for intra
    chroma
  - Fixes to ensure the correct behavior of the encoder
    algorithms (like segmentation, computation of statistics,
    etc.)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1675857600">- Update to version 3.6.0:
  * This release includes compression efficiency and perceptual
    quality improvements, speedup and memory optimizations, and
    some new features. This release is ABI compatible with the last
    release.
  * New Features:
  - New values 20-27 (corresponding to levels 7.0-7.3 and
    8.0-8.3) for the encoder control
    AV1E_SET_TARGET_SEQ_LEVEL_IDX (note that the proposal to add
    the new levels are still in draft status). The original
    special value 24 (keep level stats only for level monitoring)
    is renumbered as 32.
  - New encoder control AV1E_SET_SKIP_POSTPROC_FILTERING to skip
    the application of post-processing filters on reconstructed
    frame in all intra mode.
  - New encoder option "kf-max-pyr-height": Maximum height of
    pyramid structure used for the GOP starting with a key frame
    (-1 to 5).
  - Make SVC work for screen content.
  - Rate control improvements to reduce frame-size spikes for
    screen content coding.
  - RISC-V architecture support with gcc toolchain.
  * Compression Efficiency Improvements:
  - Peak compression efficiency in VOD setting is improved by 1%.
  - 0.7% - 2.2% RTC encoding BDrate gains for real time speed 8
    to 10.
  - 15% RTC encoding BDrate gains for screen content speed 10.
  * Perceptual Quality Improvements:
  - Resolved a visual quality issue that was reported for high
    resolution clips (2K) for speed 4 and above in VOD use case.
  - Visual quality improvements to screen content coding.
  - Quality improvements to temporal layer RTC coding.
  * Speedup and Memory Optimizations:
  - RTC single-thread encoder speedup:
    . ~6% instruction count reduction for speed 5 and 6.
    . ~15% instruction count reduction for speed 7.
    . ~10% instruction count reduction for speed 8 to 10 (&gt;=360p
    resolutions).
  - RTC multi-thread encoder speedup (beyond single-thread
    speedup):
    . 5-8% encode time reduction for speed 7 to 10.
  - RTC screen-content encoder speedup:
    . 11% instruction count reduction for speed 9 and 10 (&gt;=720p
    resolutions).
  - ~5% reduction in heap memory requirements for RTC, speed 6 to
    10.
  * AVIF:
    . 4-5% speedup for speed 9 in still-picture encoding mode.
    . 3-4% heap memory reduction in still-picture encoding mode
    for 360p-720p resolutions with multiple threads.
  * Bug Fixes:
  - Added a workaround for an AV1 specification bug which makes
    TRANSLATION type global motion models unusable.
  - Fixed AddressSanitizer global-buffer-overflow errors in
    av1/encoder/arm/neon/av1_fwd_txfm2d_neon.c.
  - Fixed AddressSanitizer heap-buffer-overflow error in
    av1_wiener_convolve_add_src_neon().
  - chromium:1393384 Avoid scene detection on spatial resize.
  - aomedia:3308 Remove color artifacts under high motion.
  - aomedia:3310 Avoid out of memory failures with Visual Studio
    2017, 2019, and 2022 for Win32 x86 builds.
  - aomedia:3346 Make SVC work properly for screen content.
  - aomedia:3348 Fix a bug where an uninitialized search_site is
    used.
  - aomedia:3365 Work around what seems like a Visual Studio 2022
    compiler optimization bug.
  - aomedia:3369 Incorrect PSNR values reported by libaom for
    12-bit encode.
- Modernize spec, use cmake_build and ldconfig_scriptlets macros.</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to BSD-2-Clause and AOMPL-1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1683028800">- Revert to BSD-2-Clause licence tag to only use SPDX valid
  license tag.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683720000">- Update to version 3.6.1:
  * aomedia:2871: Guard the support of the 7.x and 8.x levels for
    AV1 under the CONFIG_CWG_C013 config flag, and only output the
    7.x and 8.x levels when explicitly requested.
  * aomedia:3382: Choose sb_size by ppi instead of svc.
  * aomedia:3384: Fix fullpel search limits.
  * aomedia:3388: Replace left shift of xq_active by
    multiplication.
  * aomedia:3389: Fix MV clamping in av1_mv_pred.
  * aomedia:3390: set_ld_layer_depth: cap max_layer_depth to
    MAX_ARF_LAYERS.
  * aomedia:3418: Fix MV clamping in av1_int_pro_motion_estimation.
  * aomedia:3429: Move lpf thread data init to
    lpf_pipeline_mt_init().
  * b:266719111: Fix undefined behavior in Arm Neon code.
  * b:269840681: nonrd_opt: align scan tables.
  * rtc: Fix is_key_frame setting in variance partition.
  * Build: Fix build with clang-cl and Visual Studio.</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1693569600">- New upstream release 3.7.0
  - New Features
  * New codec controls:
  * AV1E_SET_QUANTIZER_ONE_PASS: Set quantizer for each frame.
  * AV1E_ENABLE_RATE_GUIDE_DELTAQ: enable the rate distribution guided delta
    quantization in all intra mode. The "enable-rate-guide-deltaq" option is
    added for this control.
  * AV1E_SET_RATE_DISTRIBUTION_INFO: set the input file for rate
    distribution used in all intra mode. The "rate-distribution-info" option
    is added for this control.
  * AV1E_GET_LUMA_CDEF_STRENGTH
  * AV1E_SET_BITRATE_ONE_PASS_CBR
  * AOM_SCALING_MODE is extended to include 2/3 and 1/3 scaling.
  * aom_tune_metric is extended to include AOM_TUNE_VMAF_SALIENCY_MAP.
    The "tune" option is extended to include "vmaf_saliency_map".
  * SVC example encoder svc_encoder_rtc is able to use the rate control
    library.
  * Loopfilter level and CDEF filter level is supported by RTC rate control
    library.
  * New speed (--cpu-used) 11, intended for RTC screen sharing, added for
    faster encoding with ~3% bdrate loss with 16% IC (instruction count)
    speedup compared to speed 10.
  - Compression Efficiency Improvements
  * Improved VoD encoding performance
  * 0.1-0.6% BDrate gains for encoding speeds 2 to 6
  * Rate control accuracy improvement in VBR mode
  * RTC encoding improvements
  * Screen content mode: 10-19% BDrate gains for speeds 6 - 10
  * Temporal layers video mode, for speed 10:
  * 2 temporal layers on low resolutions: 13-15% BDrate gain
  * 3 temporal layers on VGA/HD: 3-4% BDrate gain
  - Perceptual Quality Improvements
  * Fixed multiple block and color artifacts for RTC screen content by
  * Incorporating color into RD cost for IDTX
  * Reducing thresholds for palette mode in non RD mode
  * Allowing more palette mode testing
  * Improved color sensitivity for altref in non-RD mode.
  * Reduced video flickering for temporal layer encoding.
  - Speedup and Memory Optimizations
  * Speed up the VoD encoder
  * 2-5% for encoding speed 2 to 4
  * 9-15% for encoding speed 5 to 6
  * ARM
  * Standard bitdepth
  * speed 5: +31%
  * speed 4: +2%
  * speed 3: +9%
  * speed 2: +157%
  * High bitdepth
  * speed 5: +85%
  * RTC speedups
  * Screen content mode
  * 15% IC speedup for speeds 6-8
  * ARM: 7% for speed 9, 3% for speed 10
  * Temporal layers video mode
  * 7% speedup for 3 temporal layers on VGA/HD, for speed 10
  * Single layer video
  * x86: 2% IC speedup for speeds 7-10
  * ARM: 2-4% speedup across speeds 5-10
  - Bug Fixes
  * aomedia:3261 Assertion failed when encoding av1 with film grain and
    '--monochrome' flag
  * aomedia:3276 ensure all allocations are checked (partial fix)
  * aomedia:3451 The libaom library calls exit()
  * aomedia:3450 enable -Wshadow for C++ sources
  * aomedia:3449 Test Seg Faults After
    b459af3e345be402db052a143fcc5383d4b74cbd
  * aomedia:3416 prune unused symbols / restrict symbol visibility
  * aomedia:3443 Jenkins failure:
    UninstantiatedParameterizedTestSuite&lt;EstimateNoiseTest&gt;
  * aomedia:3434 realtime failures with CONFIG_BITSTREAM_DEBUG=1
  * aomedia:3433 DeltaqModeTest crash w/row_mt=0
  * aomedia:3429 Encoder crash when turn on both ExternalResize and
    g_threads &gt; 2
  * aomedia:3438 Build failure with
    `-DSANITIZE=address -DBUILD_SHARED_LIBS=ON` when using clang.
  * aomedia:3435 Block artifacts when scrolling with AV1 in screen sharing
    scenarios
  * aomedia:3170 vmaf tune presets produce extreme glitches in one scene
  * aomedia:3401 Building shared libaom with MSVC results in a race condition
    with the export library
  * aomedia:3420 Floating point exception in av1_tpl_get_frame_importance()
  * aomedia:3424 heap-buffer-overflow in ScaleFilterCols_16_C() (SIGABRT)
  * aomedia:3417 examples/svc_encoder_rtc.c is using internal macros and
    functions
  * aomedia:3372 SEGV in assign_frame_buffer_p av1_common_int.h
  * aomedia:3130 'cpu-features.h' file not found on Android NDK 22
  * aomedia:3415 Encoder/decoder mismatch for svc_encoder_rtc running
    1 SL 3 TL
  * aomedia:3412 Lossless Mode Fails Loopback Bit Test
  * aomedia:3409 The use of AV1_VAR_OFFS in av1/encoder/var_based_part.c is
    incorrect for high bit depths
  * aomedia:3403 test_libaom fails with error message
    "feenableexcept() failed" on Linux arm
  * aomedia:3370 Random color block at fast motion area
  * aomedia:3393 Assertion failure in av1_convolve_2d_sr_c()
  * aomedia:3392 Strong artifacting for high bit-depth real-time
  * aomedia:3376 aomenc --threads=10 --deltaq-mode=3 crashes after
    "Allintra: multi-threading of calculating differential contrast"
  * aomedia:3380 Crashes and ASan and TSan errors in deltaq-mode=3
    multithreading code
  * chromium:1410766 heap-buffer-overflow in aom_yv12_copy_v_c
  * Cannot set level via AV1E_SET_TARGET_SEQ_LEVEL_IDX
  * Encoding failure due to the use of loop restoration with unintended use of
    lossless mode.
  * Signed integer overflow in scan_past_frames
  * Signed integer overflow in update_a_sep_sym
  * Flickering in AV1 1440p/2160p HDR transcodes
  * Fixed artifacts with screen share at encoder speed 10
  * Fixed prediction setup for IDTX
- Use system libraries instead of vendored ones
  * system-gtest.patch
  * system-yuv.patch
- Enable debuginfo also on modules written in assembly
- Enable building PowerPC-specific optimizations
- Enable Neon optimized code on ARM and fix runtime CPU detection
- Fix missing images in documentation</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1693915200">- Split docs to multibuild to avoid dependency cycle</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 3.7.1:
  * Bug Fixes:
  - aomedia:3349: heap overflow when increasing resolution
  - aomedia:3478: GCC 12.2.0 emits a -Wstringop-overflow warning
    on aom/av1/encoder/motion_search_facade.c
  - aomedia:3489: Detect encoder and image high bit depth
    mismatch
  - aomedia:3491: heap-buffer-overflow on frame size change
  - b/303023614:  Segfault at encoding time for high bit depth
    images
- Switch buildtime compression to zst.</changelog>
  <changelog author="pgajdos@suse.com" date="1718020800">- security update
- added patches
  fix CVE-2024-5171 [bsc#1226020], heap buffer overflow in img_alloc_helper() caused by integer overflow
  + libaom-CVE-2024-5171.patch</changelog>
</package>
<package pkgid="b8fb31b86163a064d2587158238baad627e2d233bcf6a930fdb51c6fbcbc63bd" name="apache2" arch="aarch64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="abfafc15d76d4943d22f4f67184af6a6a58cbfd843c405b9bd3dd74a2c063af7" name="apache2" arch="ppc64le">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="73a3b8cffccea06e42dabe088c6c847e50c88d44a3e1c40f28b8915f4cc96c3a" name="apache2" arch="s390x">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="d99f2a49729c4ba96dd4687aa474c3d970a5e6edde15f9c2fa146fa1d74af99b" name="apache2" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="88b05bf122ed2f78ad583cf461d4143698d518f0edaa823c4f2e5e275492601e" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="b782b7532ef9180fdf3e062be12000894452a8a8255932bf4db84f9f9e7be368" name="apache2-devel" arch="aarch64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="508faa8566b388ef82fcc838bf82f28371d5b651cae82c235ee29e41b3f7f017" name="apache2-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="a45649fb1f8a227eebf5419a883e6930f51fa0b4a1b149e2020f20df943cca4d" name="apache2-devel" arch="s390x">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="3a0e6cfe3c471db0a40960cae81e3dc571dbbdbdcb151e91f67ca1d9278b4a85" name="apache2-devel" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="8420b5db6035ee48efd0ff500f3e7ab1cd31b326f3a6d99de02e6f83343c3566" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="e2361a92430288d3c9eabba32520b88b87b194b19ea3d18e151d32084c4302a7" name="apache2-event" arch="aarch64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="b3aa93d997ea1856937266b1a3534a07c97bd2fe7886efb3d487b952c5ac1e4c" name="apache2-event" arch="ppc64le">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="8db4caa550d65636b5451e1afdf6713c6487f7bb60ebec975c001357cbbe816b" name="apache2-event" arch="s390x">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="1dd35e8f1af5b06c3b57209d7bc63c727d9f0c248afc7bd0c60072a063800eb7" name="apache2-event" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="c5fb607039e7f0d1c9922e610140d06ecfd80f72a9c9ec6204ab78e332017c1e" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="5360c09fa41d6da08450ad63c18fe99015f71c0b54b49276e62ff9b7a7e69c93" name="apache2-manual" arch="noarch">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="24ea6c0ed18663b2e28ad9c240776b281c290fa6af1155820590ebc22d18d7fb" name="apache2-manual" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="ee3e2bf39272f0d119fb9384fa7c047d5a09f9b7e064df516801a19db8abdc5d" name="apache2-mod_php7" arch="aarch64">
  <version epoch="0" ver="7.4.33" rel="150400.4.37.1"/>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1676635200">- security update
- added patches
  fix CVE-2023-0568 [bsc#1208366], NULL byte off-by-one in php_check_specific_open_basedir
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 [bsc#1208367], DoS vulnerability when parsing multipart request body
  + php7-CVE-2023-0662.patch
  https://github.com/php/php-src/commit/a92acbad873a05470af1a47cb785a18eadd827b5, relates to CVE-2023-0567 [bsc#1208388]
  + php7-crypt-possible-buffer-overread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1679400000">- security update
- added patches
  fix CVE-2022-4900 [bsc#1209537], potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable
  + php7-CVE-2022-4900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692792000">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1705406400">- ensure we are building against openssl-1_1</changelog>
  <changelog author="pgajdos@suse.com" date="1713528000">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
</package>
<package pkgid="367b3194f3bf2ffe5119f4a1179d10c85b7d91e8d477937add0b8f9bb5ca299f" name="apache2-mod_php7" arch="ppc64le">
  <version epoch="0" ver="7.4.33" rel="150400.4.37.1"/>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1676635200">- security update
- added patches
  fix CVE-2023-0568 [bsc#1208366], NULL byte off-by-one in php_check_specific_open_basedir
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 [bsc#1208367], DoS vulnerability when parsing multipart request body
  + php7-CVE-2023-0662.patch
  https://github.com/php/php-src/commit/a92acbad873a05470af1a47cb785a18eadd827b5, relates to CVE-2023-0567 [bsc#1208388]
  + php7-crypt-possible-buffer-overread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1679400000">- security update
- added patches
  fix CVE-2022-4900 [bsc#1209537], potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable
  + php7-CVE-2022-4900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692792000">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1705406400">- ensure we are building against openssl-1_1</changelog>
  <changelog author="pgajdos@suse.com" date="1713528000">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
</package>
<package pkgid="7e88a7cb6a4beb588f0feb27767608aae1eb8e3e973b72ebda5962f32ddc919a" name="apache2-mod_php7" arch="s390x">
  <version epoch="0" ver="7.4.33" rel="150400.4.37.1"/>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1676635200">- security update
- added patches
  fix CVE-2023-0568 [bsc#1208366], NULL byte off-by-one in php_check_specific_open_basedir
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 [bsc#1208367], DoS vulnerability when parsing multipart request body
  + php7-CVE-2023-0662.patch
  https://github.com/php/php-src/commit/a92acbad873a05470af1a47cb785a18eadd827b5, relates to CVE-2023-0567 [bsc#1208388]
  + php7-crypt-possible-buffer-overread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1679400000">- security update
- added patches
  fix CVE-2022-4900 [bsc#1209537], potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable
  + php7-CVE-2022-4900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692792000">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1705406400">- ensure we are building against openssl-1_1</changelog>
  <changelog author="pgajdos@suse.com" date="1713528000">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
</package>
<package pkgid="5901e548fe0d51be18bed8a40885d5a856a846274b01cdd29a55f5804f0ead5f" name="apache2-mod_php7" arch="src">
  <version epoch="0" ver="7.4.33" rel="150400.4.37.1"/>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1676635200">- security update
- added patches
  fix CVE-2023-0568 [bsc#1208366], NULL byte off-by-one in php_check_specific_open_basedir
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 [bsc#1208367], DoS vulnerability when parsing multipart request body
  + php7-CVE-2023-0662.patch
  https://github.com/php/php-src/commit/a92acbad873a05470af1a47cb785a18eadd827b5, relates to CVE-2023-0567 [bsc#1208388]
  + php7-crypt-possible-buffer-overread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1679400000">- security update
- added patches
  fix CVE-2022-4900 [bsc#1209537], potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable
  + php7-CVE-2022-4900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692792000">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1705406400">- ensure we are building against openssl-1_1</changelog>
  <changelog author="pgajdos@suse.com" date="1713528000">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
</package>
<package pkgid="f3dfdeba494c4bdcded4008d9a17e58e4f34d71c552bdd70d99769bbbe597286" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150400.4.37.1"/>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1676635200">- security update
- added patches
  fix CVE-2023-0568 [bsc#1208366], NULL byte off-by-one in php_check_specific_open_basedir
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 [bsc#1208367], DoS vulnerability when parsing multipart request body
  + php7-CVE-2023-0662.patch
  https://github.com/php/php-src/commit/a92acbad873a05470af1a47cb785a18eadd827b5, relates to CVE-2023-0567 [bsc#1208388]
  + php7-crypt-possible-buffer-overread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1679400000">- security update
- added patches
  fix CVE-2022-4900 [bsc#1209537], potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable
  + php7-CVE-2022-4900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692792000">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1705406400">- ensure we are building against openssl-1_1</changelog>
  <changelog author="pgajdos@suse.com" date="1713528000">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
</package>
<package pkgid="5ba1eff14a74cb12f3fdf58ef097b53258e7b0e00390835e3777e4e9c0b6ca81" name="apache2-mod_php8" arch="aarch64">
  <version epoch="0" ver="8.2.20" rel="150600.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1684843200">- also MIT license (systzdata patch, ext/date/lib/parse_posix.c)
  [https://build.suse.de/request/show/298230]</changelog>
  <changelog author="pgajdos@suse.com" date="1685016000">- repack the tarball temporarily [bsc#1211648]</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- version update to 8.1.20
  * This is a security release.
  * https://www.php.net/ChangeLog-8.php#8.1.20
- force to repack tarball after update
  https://github.com/php/php-src/issues/11300
- session.save_path set to /var/lib/php8/sessions in mod_php8.conf
  and www.conf php-fpm pool example
- modified sources
  % mod_php8.conf
- added sources
  + repack.sh
  + php-unicode-allow-redistribution.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1687435200">- version update to 8.2.7
  * Readonly classes
  * Disjunctive Normal Form (DNF) Types
  * Allow null, false, and true as stand-alone types
  * New "Random" extension
  * Constants in traits
  * Deprecate dynamic properties
  * for details, see
    https://www.php.net/releases/8.2/en.php
    https://www.php.net/manual/en/migration82.php
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)
  % php-date-regenerate-lexers.patch (refreshed)
  % php-ini.patch (refreshed)
  % php-systzdata-v23.patch (refreshed)
- CVE-2023-3247 [bsc#1212349]</changelog>
  <changelog author="pgajdos@suse.com" date="1689595200">- version update to 8.2.8
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.8
- modified patches
  % php-sort-filelist-phar.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1692705600">- version update to 8.2.9
  * This is a security release.
  * Fixes CVE-2023-3824 [bsc#1214103] and CVE-2023-3823 [bsc#1214106]
  * https://www.php.net/ChangeLog-8.php#8.2.9
- deleted patches
  - php-unicode-allow-redistribution.patch (upstreamed)
- deleted sources
  - repack.sh (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1693569600">- version update to 8.2.10
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.10</changelog>
  <changelog author="bwiedemann@suse.com" date="1693569601">- Use %make_build macro</changelog>
  <changelog author="pgajdos@suse.com" date="1695729600">- add missing references to rpm changelog
- 15sp4 only:
  [bsc#1200772], [jsc#SLE-24723] add pecl, pear
  [jsc#SLE-23639] version update</changelog>
  <changelog author="pgajdos@suse.com" date="1695988800">- version update to 8.2.11
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.11</changelog>
  <changelog author="pgajdos@suse.com" date="1698321600">- version update to 8.2.12
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.12</changelog>
  <changelog author="pgajdos@suse.com" date="1700827200">- version update to 8.2.13
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.13</changelog>
  <changelog author="pgajdos@suse.com" date="1704196800">- version update to 8.2.14
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.14</changelog>
  <changelog author="pgajdos@suse.com" date="1705579200">- version update to 8.2.15
  * This is a bug fix release.
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1708084800">- version update to 8.2.16
  * This is a bug fix release.
- modified patches
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system default cipher list instead of hardcoded values
  by using crypto-policies. [bsc#1211301]
  * Use the --with-system-ciphers configure option.</changelog>
  <changelog author="pgajdos@suse.com" date="1710849600">- version update to 8.2.17
  * This is a bug fix release.</changelog>
  <changelog author="pgajdos@suse.com" date="1712923200">- version update to 8.2.18
  * This is a security release.</changelog>
  <changelog author="pgajdos@suse.com" date="1715256000">- version update to 8.2.19
  * This is a bug fix release.</changelog>
  <changelog author="pgajdos@suse.com" date="1717761600">- version update to 8.2.20
  * This is a security release.</changelog>
</package>
<package pkgid="73b14a08542b8529a0ac94694b6d30b478ccd5e51c3a49478db650b68d3873a6" name="apache2-mod_php8" arch="ppc64le">
  <version epoch="0" ver="8.2.20" rel="150600.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1684843200">- also MIT license (systzdata patch, ext/date/lib/parse_posix.c)
  [https://build.suse.de/request/show/298230]</changelog>
  <changelog author="pgajdos@suse.com" date="1685016000">- repack the tarball temporarily [bsc#1211648]</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- version update to 8.1.20
  * This is a security release.
  * https://www.php.net/ChangeLog-8.php#8.1.20
- force to repack tarball after update
  https://github.com/php/php-src/issues/11300
- session.save_path set to /var/lib/php8/sessions in mod_php8.conf
  and www.conf php-fpm pool example
- modified sources
  % mod_php8.conf
- added sources
  + repack.sh
  + php-unicode-allow-redistribution.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1687435200">- version update to 8.2.7
  * Readonly classes
  * Disjunctive Normal Form (DNF) Types
  * Allow null, false, and true as stand-alone types
  * New "Random" extension
  * Constants in traits
  * Deprecate dynamic properties
  * for details, see
    https://www.php.net/releases/8.2/en.php
    https://www.php.net/manual/en/migration82.php
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)
  % php-date-regenerate-lexers.patch (refreshed)
  % php-ini.patch (refreshed)
  % php-systzdata-v23.patch (refreshed)
- CVE-2023-3247 [bsc#1212349]</changelog>
  <changelog author="pgajdos@suse.com" date="1689595200">- version update to 8.2.8
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.8
- modified patches
  % php-sort-filelist-phar.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1692705600">- version update to 8.2.9
  * This is a security release.
  * Fixes CVE-2023-3824 [bsc#1214103] and CVE-2023-3823 [bsc#1214106]
  * https://www.php.net/ChangeLog-8.php#8.2.9
- deleted patches
  - php-unicode-allow-redistribution.patch (upstreamed)
- deleted sources
  - repack.sh (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1693569600">- version update to 8.2.10
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.10</changelog>
  <changelog author="bwiedemann@suse.com" date="1693569601">- Use %make_build macro</changelog>
  <changelog author="pgajdos@suse.com" date="1695729600">- add missing references to rpm changelog
- 15sp4 only:
  [bsc#1200772], [jsc#SLE-24723] add pecl, pear
  [jsc#SLE-23639] version update</changelog>
  <changelog author="pgajdos@suse.com" date="1695988800">- version update to 8.2.11
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.11</changelog>
  <changelog author="pgajdos@suse.com" date="1698321600">- version update to 8.2.12
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.12</changelog>
  <changelog author="pgajdos@suse.com" date="1700827200">- version update to 8.2.13
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.13</changelog>
  <changelog author="pgajdos@suse.com" date="1704196800">- version update to 8.2.14
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.14</changelog>
  <changelog author="pgajdos@suse.com" date="1705579200">- version update to 8.2.15
  * This is a bug fix release.
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1708084800">- version update to 8.2.16
  * This is a bug fix release.
- modified patches
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system default cipher list instead of hardcoded values
  by using crypto-policies. [bsc#1211301]
  * Use the --with-system-ciphers configure option.</changelog>
  <changelog author="pgajdos@suse.com" date="1710849600">- version update to 8.2.17
  * This is a bug fix release.</changelog>
  <changelog author="pgajdos@suse.com" date="1712923200">- version update to 8.2.18
  * This is a security release.</changelog>
  <changelog author="pgajdos@suse.com" date="1715256000">- version update to 8.2.19
  * This is a bug fix release.</changelog>
  <changelog author="pgajdos@suse.com" date="1717761600">- version update to 8.2.20
  * This is a security release.</changelog>
</package>
<package pkgid="d228c687953c059724e9bdde294f87b18d3ce5efe81e938265791c963d20c268" name="apache2-mod_php8" arch="s390x">
  <version epoch="0" ver="8.2.20" rel="150600.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1684843200">- also MIT license (systzdata patch, ext/date/lib/parse_posix.c)
  [https://build.suse.de/request/show/298230]</changelog>
  <changelog author="pgajdos@suse.com" date="1685016000">- repack the tarball temporarily [bsc#1211648]</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- version update to 8.1.20
  * This is a security release.
  * https://www.php.net/ChangeLog-8.php#8.1.20
- force to repack tarball after update
  https://github.com/php/php-src/issues/11300
- session.save_path set to /var/lib/php8/sessions in mod_php8.conf
  and www.conf php-fpm pool example
- modified sources
  % mod_php8.conf
- added sources
  + repack.sh
  + php-unicode-allow-redistribution.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1687435200">- version update to 8.2.7
  * Readonly classes
  * Disjunctive Normal Form (DNF) Types
  * Allow null, false, and true as stand-alone types
  * New "Random" extension
  * Constants in traits
  * Deprecate dynamic properties
  * for details, see
    https://www.php.net/releases/8.2/en.php
    https://www.php.net/manual/en/migration82.php
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)
  % php-date-regenerate-lexers.patch (refreshed)
  % php-ini.patch (refreshed)
  % php-systzdata-v23.patch (refreshed)
- CVE-2023-3247 [bsc#1212349]</changelog>
  <changelog author="pgajdos@suse.com" date="1689595200">- version update to 8.2.8
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.8
- modified patches
  % php-sort-filelist-phar.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1692705600">- version update to 8.2.9
  * This is a security release.
  * Fixes CVE-2023-3824 [bsc#1214103] and CVE-2023-3823 [bsc#1214106]
  * https://www.php.net/ChangeLog-8.php#8.2.9
- deleted patches
  - php-unicode-allow-redistribution.patch (upstreamed)
- deleted sources
  - repack.sh (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1693569600">- version update to 8.2.10
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.10</changelog>
  <changelog author="bwiedemann@suse.com" date="1693569601">- Use %make_build macro</changelog>
  <changelog author="pgajdos@suse.com" date="1695729600">- add missing references to rpm changelog
- 15sp4 only:
  [bsc#1200772], [jsc#SLE-24723] add pecl, pear
  [jsc#SLE-23639] version update</changelog>
  <changelog author="pgajdos@suse.com" date="1695988800">- version update to 8.2.11
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.11</changelog>
  <changelog author="pgajdos@suse.com" date="1698321600">- version update to 8.2.12
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.12</changelog>
  <changelog author="pgajdos@suse.com" date="1700827200">- version update to 8.2.13
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.13</changelog>
  <changelog author="pgajdos@suse.com" date="1704196800">- version update to 8.2.14
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.14</changelog>
  <changelog author="pgajdos@suse.com" date="1705579200">- version update to 8.2.15
  * This is a bug fix release.
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1708084800">- version update to 8.2.16
  * This is a bug fix release.
- modified patches
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system default cipher list instead of hardcoded values
  by using crypto-policies. [bsc#1211301]
  * Use the --with-system-ciphers configure option.</changelog>
  <changelog author="pgajdos@suse.com" date="1710849600">- version update to 8.2.17
  * This is a bug fix release.</changelog>
  <changelog author="pgajdos@suse.com" date="1712923200">- version update to 8.2.18
  * This is a security release.</changelog>
  <changelog author="pgajdos@suse.com" date="1715256000">- version update to 8.2.19
  * This is a bug fix release.</changelog>
  <changelog author="pgajdos@suse.com" date="1717761600">- version update to 8.2.20
  * This is a security release.</changelog>
</package>
<package pkgid="15d8ce51c9c37fe3e6dc2923e1c1c3b11118278816694003bb727b9cd8036f06" name="apache2-mod_php8" arch="src">
  <version epoch="0" ver="8.2.20" rel="150600.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1684843200">- also MIT license (systzdata patch, ext/date/lib/parse_posix.c)
  [https://build.suse.de/request/show/298230]</changelog>
  <changelog author="pgajdos@suse.com" date="1685016000">- repack the tarball temporarily [bsc#1211648]</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- version update to 8.1.20
  * This is a security release.
  * https://www.php.net/ChangeLog-8.php#8.1.20
- force to repack tarball after update
  https://github.com/php/php-src/issues/11300
- session.save_path set to /var/lib/php8/sessions in mod_php8.conf
  and www.conf php-fpm pool example
- modified sources
  % mod_php8.conf
- added sources
  + repack.sh
  + php-unicode-allow-redistribution.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1687435200">- version update to 8.2.7
  * Readonly classes
  * Disjunctive Normal Form (DNF) Types
  * Allow null, false, and true as stand-alone types
  * New "Random" extension
  * Constants in traits
  * Deprecate dynamic properties
  * for details, see
    https://www.php.net/releases/8.2/en.php
    https://www.php.net/manual/en/migration82.php
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)
  % php-date-regenerate-lexers.patch (refreshed)
  % php-ini.patch (refreshed)
  % php-systzdata-v23.patch (refreshed)
- CVE-2023-3247 [bsc#1212349]</changelog>
  <changelog author="pgajdos@suse.com" date="1689595200">- version update to 8.2.8
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.8
- modified patches
  % php-sort-filelist-phar.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1692705600">- version update to 8.2.9
  * This is a security release.
  * Fixes CVE-2023-3824 [bsc#1214103] and CVE-2023-3823 [bsc#1214106]
  * https://www.php.net/ChangeLog-8.php#8.2.9
- deleted patches
  - php-unicode-allow-redistribution.patch (upstreamed)
- deleted sources
  - repack.sh (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1693569600">- version update to 8.2.10
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.10</changelog>
  <changelog author="bwiedemann@suse.com" date="1693569601">- Use %make_build macro</changelog>
  <changelog author="pgajdos@suse.com" date="1695729600">- add missing references to rpm changelog
- 15sp4 only:
  [bsc#1200772], [jsc#SLE-24723] add pecl, pear
  [jsc#SLE-23639] version update</changelog>
  <changelog author="pgajdos@suse.com" date="1695988800">- version update to 8.2.11
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.11</changelog>
  <changelog author="pgajdos@suse.com" date="1698321600">- version update to 8.2.12
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.12</changelog>
  <changelog author="pgajdos@suse.com" date="1700827200">- version update to 8.2.13
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.13</changelog>
  <changelog author="pgajdos@suse.com" date="1704196800">- version update to 8.2.14
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.14</changelog>
  <changelog author="pgajdos@suse.com" date="1705579200">- version update to 8.2.15
  * This is a bug fix release.
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1708084800">- version update to 8.2.16
  * This is a bug fix release.
- modified patches
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system default cipher list instead of hardcoded values
  by using crypto-policies. [bsc#1211301]
  * Use the --with-system-ciphers configure option.</changelog>
  <changelog author="pgajdos@suse.com" date="1710849600">- version update to 8.2.17
  * This is a bug fix release.</changelog>
  <changelog author="pgajdos@suse.com" date="1712923200">- version update to 8.2.18
  * This is a security release.</changelog>
  <changelog author="pgajdos@suse.com" date="1715256000">- version update to 8.2.19
  * This is a bug fix release.</changelog>
  <changelog author="pgajdos@suse.com" date="1717761600">- version update to 8.2.20
  * This is a security release.</changelog>
</package>
<package pkgid="3cb2f46bbc1e0f9e9889e38318f271a36f1b0df07cece7177253dc5c54db6324" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.2.20" rel="150600.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1684843200">- also MIT license (systzdata patch, ext/date/lib/parse_posix.c)
  [https://build.suse.de/request/show/298230]</changelog>
  <changelog author="pgajdos@suse.com" date="1685016000">- repack the tarball temporarily [bsc#1211648]</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- version update to 8.1.20
  * This is a security release.
  * https://www.php.net/ChangeLog-8.php#8.1.20
- force to repack tarball after update
  https://github.com/php/php-src/issues/11300
- session.save_path set to /var/lib/php8/sessions in mod_php8.conf
  and www.conf php-fpm pool example
- modified sources
  % mod_php8.conf
- added sources
  + repack.sh
  + php-unicode-allow-redistribution.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1687435200">- version update to 8.2.7
  * Readonly classes
  * Disjunctive Normal Form (DNF) Types
  * Allow null, false, and true as stand-alone types
  * New "Random" extension
  * Constants in traits
  * Deprecate dynamic properties
  * for details, see
    https://www.php.net/releases/8.2/en.php
    https://www.php.net/manual/en/migration82.php
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)
  % php-date-regenerate-lexers.patch (refreshed)
  % php-ini.patch (refreshed)
  % php-systzdata-v23.patch (refreshed)
- CVE-2023-3247 [bsc#1212349]</changelog>
  <changelog author="pgajdos@suse.com" date="1689595200">- version update to 8.2.8
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.8
- modified patches
  % php-sort-filelist-phar.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1692705600">- version update to 8.2.9
  * This is a security release.
  * Fixes CVE-2023-3824 [bsc#1214103] and CVE-2023-3823 [bsc#1214106]
  * https://www.php.net/ChangeLog-8.php#8.2.9
- deleted patches
  - php-unicode-allow-redistribution.patch (upstreamed)
- deleted sources
  - repack.sh (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1693569600">- version update to 8.2.10
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.10</changelog>
  <changelog author="bwiedemann@suse.com" date="1693569601">- Use %make_build macro</changelog>
  <changelog author="pgajdos@suse.com" date="1695729600">- add missing references to rpm changelog
- 15sp4 only:
  [bsc#1200772], [jsc#SLE-24723] add pecl, pear
  [jsc#SLE-23639] version update</changelog>
  <changelog author="pgajdos@suse.com" date="1695988800">- version update to 8.2.11
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.2.11</changelog>
  <changelog author="pgajdos@suse.com" date="1698321600">- version update to 8.2.12
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.12</changelog>
  <changelog author="pgajdos@suse.com" date="1700827200">- version update to 8.2.13
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.13</changelog>
  <changelog author="pgajdos@suse.com" date="1704196800">- version update to 8.2.14
  * This is a bug fix release.
    https://www.php.net/ChangeLog-8.php#8.2.14</changelog>
  <changelog author="pgajdos@suse.com" date="1705579200">- version update to 8.2.15
  * This is a bug fix release.
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1708084800">- version update to 8.2.16
  * This is a bug fix release.
- modified patches
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system default cipher list instead of hardcoded values
  by using crypto-policies. [bsc#1211301]
  * Use the --with-system-ciphers configure option.</changelog>
  <changelog author="pgajdos@suse.com" date="1710849600">- version update to 8.2.17
  * This is a bug fix release.</changelog>
  <changelog author="pgajdos@suse.com" date="1712923200">- version update to 8.2.18
  * This is a security release.</changelog>
  <changelog author="pgajdos@suse.com" date="1715256000">- version update to 8.2.19
  * This is a bug fix release.</changelog>
  <changelog author="pgajdos@suse.com" date="1717761600">- version update to 8.2.20
  * This is a security release.</changelog>
</package>
<package pkgid="7c0bd73eff38078e9ebe517417ad5ffc74b04e9a37c4e2575bb9f6a498dc9f54" name="apache2-prefork" arch="aarch64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="81a16f77bbdaa0ab9ec37a0fedef5453e2ec4d75a7bf25208819efb2cd9d2da3" name="apache2-prefork" arch="ppc64le">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="cd78c6b4ff51a64591d00e964683ba5092c679a3849504bdc8d3e15a279b83e0" name="apache2-prefork" arch="s390x">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="68bb0d8cd8e45293cfcd6cf1281b3a118ed3c6981e95bfe609365de6065cfdb4" name="apache2-prefork" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="ec22b75e50852b2a307de1c6fd0595237abe83b8d674ee20890e2568c5f9cab1" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="fbedcf3c24ed930ca224932812bc143d934568ae6a407aa9eaf34bf3ea334b27" name="apache2-utils" arch="aarch64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="1e0d00a25ddacc263f6dfbf1c29ddd11353897d8ce62f20d496a0d6dbec418df" name="apache2-utils" arch="ppc64le">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="9fedeff7299705ca16bb250136f2073670c5b3d250b173c721f1358a786766ba" name="apache2-utils" arch="s390x">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="28ae75d83b4decfeeb68a6886167cb0eee7aebba8a33f027363841562089a4e7" name="apache2-utils" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="feb27f065f37dc1a607bd2333c2b29f81b2ab3cf8f78d9c8d279b8f86ebd69a1" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="f94099fe6963011f966b7ac44fc46b7d3f1466325cdbcae504616b915c052baa" name="apache2-worker" arch="aarch64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="b22d0ef518c74436179935bbccd0aaee109fa51251d71a1eeb48c78fa208c998" name="apache2-worker" arch="ppc64le">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="16ba9c6aacb1f0548c851c96795d0c97b3f6822ee090a92a567776e97fe47ee8" name="apache2-worker" arch="s390x">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="483677221d7482734693fa90f4446342e35ad49ae9b6675202a3c7725d6cb6e1" name="apache2-worker" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="d0bff62eb8cbc819354ea996bc05929e6f3e1c4872c07abc22239c890925bf7a" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="fc9b9fc24bb3c8fff08cf7b52ddaa492c061a502399ae3b20d999e5d62ff687a" name="apiguardian" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="150200.3.10.2"/>
  <changelog author="fstrba@suse.com" date="1549022400">- Initial package of apiguardian 1.0.0
- Add apiguardian-build.xml file to be able to build with ant</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- Upgrade to upstream version 1.1.2
  * Fixes:
    + Javadoc 1.8 cannot link to the published 1.1.0 API
    documentation
    + Add LICENSE/NOTICE to the generated jar
    + Allow @API to be declared at the package level
    + Explain usage of Status.DEPRECATED
    + Include OSGi metadata in manifest</changelog>
</package>
<package pkgid="283dd182aa308409de99fccc4d51b4988349ecd4c488a43a99ce7c43cb9207d8" name="apiguardian" arch="src">
  <version epoch="0" ver="1.1.2" rel="150200.3.10.2"/>
  <changelog author="fstrba@suse.com" date="1549022400">- Initial package of apiguardian 1.0.0
- Add apiguardian-build.xml file to be able to build with ant</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- Upgrade to upstream version 1.1.2
  * Fixes:
    + Javadoc 1.8 cannot link to the published 1.1.0 API
    documentation
    + Add LICENSE/NOTICE to the generated jar
    + Allow @API to be declared at the package level
    + Explain usage of Status.DEPRECATED
    + Include OSGi metadata in manifest</changelog>
</package>
<package pkgid="44935e5b916c34db94ad9fa5722477964718e7f97a1c4c800d4ef65bcce70b14" name="apiguardian-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="150200.3.10.2"/>
  <changelog author="fstrba@suse.com" date="1549022400">- Initial package of apiguardian 1.0.0
- Add apiguardian-build.xml file to be able to build with ant</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- Upgrade to upstream version 1.1.2
  * Fixes:
    + Javadoc 1.8 cannot link to the published 1.1.0 API
    documentation
    + Add LICENSE/NOTICE to the generated jar
    + Allow @API to be declared at the package level
    + Explain usage of Status.DEPRECATED
    + Include OSGi metadata in manifest</changelog>
</package>
<package pkgid="ea22388d430de3a6ac6bfc6649e24318918591c00f326ee54676a07092b281d6" name="assertj-core" arch="noarch">
  <version epoch="0" ver="3.25.3" rel="150200.5.4.3"/>
  <changelog author="fstrba@suse.com" date="1556625600">- Initial packaging of assertj-core 3.8.0</changelog>
  <changelog author="jengelh@inai.de" date="1556712000">- Ensure neutrality of descriptions.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Upgrade to version 3.25.3
  * Deprecations:
    + Deprecate the following date/time related assertions in favor
    of isCloseTo:
  - isEqualToIgnoringHours
  - isEqualToIgnoringMinutes
  - isEqualToIgnoringSeconds
  - isEqualToIgnoringMillis
  - isEqualToIgnoringNanos
  - isInSameHourAs
  - isInSameMinuteAs
  - isInSameSecondAs
    + Deprecate asList in favor of asInstanceOf
  * New Features:
    + Add Descriptable#describedAs(Supplier&lt;String&gt;)
    + Add isInThePast and isInTheFuture to LocalDate assertions
    + Add isInThePast and isInTheFuture to the missing Java 8
    date/time types
    + Add isRecord and isNotRecord to Class assertions
    + Add hasNullValue and doesNotHaveNullValue to
    AtomicReferenceAssert
    + Add asBoolean|Byte|Short|Int|Long|Float|Double to String
    assertions
    + Add hasRecordComponents to Class assertions
    + Add getters for field path in ComparisonDifference
    + Allow to compare enum and string fields in the recursive
    comparison
    + Provide value when assertThatThrownBy / thenThrownBy fail
    + Add isSealed and isNotSealed to Class assertions
    + Add assertThatCharSequence to disambiguate Groovy's GString
    + Change the way the properties are collected using the
    Class.getMethods() API instead of iterating the class
    hierarchy using Class.declaredMethods()
    + Add default constructor for RecursiveComparator
    + Add isPrimitive and isNotPrimitive to Class assertions
    + Add anyOf(ThrowingConsumer...) and allOf(ThrowingConsumer...)
    + Show the array/iterable under test in the assertion error
    message when it is not empty but should have been
  * Bug Fixes:
    + Compare Java types from javax and com.sun by their equals
    method in recursive comparison
    + The recursive comparison comparingOnlyFields did not treat
    array/iterable elements as root objects
    + Fixes a bug when failing assertions on DirectoryStream types
    + Fix handling of null containers in the recursive assertion
    + Handle null values in map entry sets when formatting
    + Fix NPE when expected and actual field values are null
    + Fix NPE on anyMatch when actual contains null and
    Objects::isNull is used as predicate
    + Fix misleading subsequence failure messages in string
    assertions
    + Do not ignore nested fields of types specified in
    comparingOnlyFieldsOfTypes
    + containsExactly does not work properly with maps not using
    equals to compare keys
    + Escape percentage in shouldContainExactly error message
    + Fix recursive comparison of ignored types in unordered
    collection
    + Revert "Provide value when assertThatThrownBy/thenThrownBy
    fail"
    + Revert "fix: containsExactly does not work properly with maps
    not using equals to compare keys"
    + Fix unresolvable Javadoc stylesheet URLs, simplify
    configuration
    + Fix missing configuration for MatcherAssert soft assertions
    + Make deprecation notice visible in AbstractAssert#asList
    + Recursive comparison uses equals on root object when
    useOverriddenEquals is enabled
    + satisfiesExactlyInAnyOrder fails if actual overrides equals
    + Avoid calling actual.hashCode() and expected.hashCode() in
    DualValue
    + Recursive comparison checks for existence of fields in types
    that parameterize nested unordered iterables
    + Lock maven-clean-plugin version for all modules
    + Fix a performance regression in the recursive comparison
    related to FieldLocation
    + Don't fail when the recursive comparison checks compared
    fields in collection elements
  * Improvements
    + Add Spotless
    + Use Bnd feature to write resolved bndrun files to output
    folder
    + Add Throwable stack trace to ShouldHaveClause
    + Avoid copy of any Collection instance in
    Iterables::assertContains
    + Add Throwable stack trace to ShouldHaveRootCauseInstance and
    ShouldHaveRootCauseExactlyInstance
    + Add missing description to nested condition
    + Make nestable condition factory accept conditions on super
    types
    + Add varargs overload to Assert::hasString and
    Assert::doesNotHaveString
    + Improve recursive comparison performance by caching field and
    field names result
    + Document performance cost of ignoring collection order
    + Track visited values and their comparison differences so that
    they can be reused
    + Use hash code for compareUnorderedIterables to improve
    performance in some common cases
    + Improve recursive comparison error message regarding equals
    methods used for JDK types
    + Format large arrays as strings
    + Remove null check as isArray already performs it
    + Fix PrimitiveArralList/TransformlingList test file names
    + Add exception for usages of isEqualTo and isNotEqualTo on
    assertions
    + Add check for missing fields in recursive comparison where
    specific fields are requested for comparison
    + Improve efficiency of iterable string conversion
    + Add more tests for usingRecursiveComparison
    + Checks that compared fields exist before running the recursive
    comparison
    + Remove maven-surefire-plugin duplicate version
    + Remove Maven default goal
    + Add dependency graph workflow
    + Normalize non-breaking spaces like regular white spaces
    + AbstractOffsetDateTimeAssert::isBetween parameter names should
    use inclusive, not exclusive
    + Invoke isNotNull in returns and doesNotReturn
    + Cache node names in ComparingFields, ComparingProperties
    + Cache node names in ComparingNormalizedFields
    + Use simpler syntax in
    DefaultRecursiveComparisonIntrospectionStrategy
    .getChildrenNodeNamesOf
    + Update to Contributor Covenant Code of Conduct v2.1
    + Correct contains assertion Javadoc to reflect method behavior
    in case actual is not empty and the group of values to look
    for is
    + Fix Javadoc typos
    + Improving null-safety of isEqualToNormalizingNewlines
    + Speed up for BinaryDiff performance
    + Upgrade workflows to Java 21
    + Apply flatten-maven-plugin to assertj-core and assertj-guava</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Require in OBS junit5-minimal to avoid provider choice</changelog>
</package>
<package pkgid="36d14b0b961124536a93f90d3f1f1befd2c3abfb76934bb3987edf49548a23db" name="assertj-core" arch="src">
  <version epoch="0" ver="3.25.3" rel="150200.5.4.3"/>
  <changelog author="fstrba@suse.com" date="1556625600">- Initial packaging of assertj-core 3.8.0</changelog>
  <changelog author="jengelh@inai.de" date="1556712000">- Ensure neutrality of descriptions.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Upgrade to version 3.25.3
  * Deprecations:
    + Deprecate the following date/time related assertions in favor
    of isCloseTo:
  - isEqualToIgnoringHours
  - isEqualToIgnoringMinutes
  - isEqualToIgnoringSeconds
  - isEqualToIgnoringMillis
  - isEqualToIgnoringNanos
  - isInSameHourAs
  - isInSameMinuteAs
  - isInSameSecondAs
    + Deprecate asList in favor of asInstanceOf
  * New Features:
    + Add Descriptable#describedAs(Supplier&lt;String&gt;)
    + Add isInThePast and isInTheFuture to LocalDate assertions
    + Add isInThePast and isInTheFuture to the missing Java 8
    date/time types
    + Add isRecord and isNotRecord to Class assertions
    + Add hasNullValue and doesNotHaveNullValue to
    AtomicReferenceAssert
    + Add asBoolean|Byte|Short|Int|Long|Float|Double to String
    assertions
    + Add hasRecordComponents to Class assertions
    + Add getters for field path in ComparisonDifference
    + Allow to compare enum and string fields in the recursive
    comparison
    + Provide value when assertThatThrownBy / thenThrownBy fail
    + Add isSealed and isNotSealed to Class assertions
    + Add assertThatCharSequence to disambiguate Groovy's GString
    + Change the way the properties are collected using the
    Class.getMethods() API instead of iterating the class
    hierarchy using Class.declaredMethods()
    + Add default constructor for RecursiveComparator
    + Add isPrimitive and isNotPrimitive to Class assertions
    + Add anyOf(ThrowingConsumer...) and allOf(ThrowingConsumer...)
    + Show the array/iterable under test in the assertion error
    message when it is not empty but should have been
  * Bug Fixes:
    + Compare Java types from javax and com.sun by their equals
    method in recursive comparison
    + The recursive comparison comparingOnlyFields did not treat
    array/iterable elements as root objects
    + Fixes a bug when failing assertions on DirectoryStream types
    + Fix handling of null containers in the recursive assertion
    + Handle null values in map entry sets when formatting
    + Fix NPE when expected and actual field values are null
    + Fix NPE on anyMatch when actual contains null and
    Objects::isNull is used as predicate
    + Fix misleading subsequence failure messages in string
    assertions
    + Do not ignore nested fields of types specified in
    comparingOnlyFieldsOfTypes
    + containsExactly does not work properly with maps not using
    equals to compare keys
    + Escape percentage in shouldContainExactly error message
    + Fix recursive comparison of ignored types in unordered
    collection
    + Revert "Provide value when assertThatThrownBy/thenThrownBy
    fail"
    + Revert "fix: containsExactly does not work properly with maps
    not using equals to compare keys"
    + Fix unresolvable Javadoc stylesheet URLs, simplify
    configuration
    + Fix missing configuration for MatcherAssert soft assertions
    + Make deprecation notice visible in AbstractAssert#asList
    + Recursive comparison uses equals on root object when
    useOverriddenEquals is enabled
    + satisfiesExactlyInAnyOrder fails if actual overrides equals
    + Avoid calling actual.hashCode() and expected.hashCode() in
    DualValue
    + Recursive comparison checks for existence of fields in types
    that parameterize nested unordered iterables
    + Lock maven-clean-plugin version for all modules
    + Fix a performance regression in the recursive comparison
    related to FieldLocation
    + Don't fail when the recursive comparison checks compared
    fields in collection elements
  * Improvements
    + Add Spotless
    + Use Bnd feature to write resolved bndrun files to output
    folder
    + Add Throwable stack trace to ShouldHaveClause
    + Avoid copy of any Collection instance in
    Iterables::assertContains
    + Add Throwable stack trace to ShouldHaveRootCauseInstance and
    ShouldHaveRootCauseExactlyInstance
    + Add missing description to nested condition
    + Make nestable condition factory accept conditions on super
    types
    + Add varargs overload to Assert::hasString and
    Assert::doesNotHaveString
    + Improve recursive comparison performance by caching field and
    field names result
    + Document performance cost of ignoring collection order
    + Track visited values and their comparison differences so that
    they can be reused
    + Use hash code for compareUnorderedIterables to improve
    performance in some common cases
    + Improve recursive comparison error message regarding equals
    methods used for JDK types
    + Format large arrays as strings
    + Remove null check as isArray already performs it
    + Fix PrimitiveArralList/TransformlingList test file names
    + Add exception for usages of isEqualTo and isNotEqualTo on
    assertions
    + Add check for missing fields in recursive comparison where
    specific fields are requested for comparison
    + Improve efficiency of iterable string conversion
    + Add more tests for usingRecursiveComparison
    + Checks that compared fields exist before running the recursive
    comparison
    + Remove maven-surefire-plugin duplicate version
    + Remove Maven default goal
    + Add dependency graph workflow
    + Normalize non-breaking spaces like regular white spaces
    + AbstractOffsetDateTimeAssert::isBetween parameter names should
    use inclusive, not exclusive
    + Invoke isNotNull in returns and doesNotReturn
    + Cache node names in ComparingFields, ComparingProperties
    + Cache node names in ComparingNormalizedFields
    + Use simpler syntax in
    DefaultRecursiveComparisonIntrospectionStrategy
    .getChildrenNodeNamesOf
    + Update to Contributor Covenant Code of Conduct v2.1
    + Correct contains assertion Javadoc to reflect method behavior
    in case actual is not empty and the group of values to look
    for is
    + Fix Javadoc typos
    + Improving null-safety of isEqualToNormalizingNewlines
    + Speed up for BinaryDiff performance
    + Upgrade workflows to Java 21
    + Apply flatten-maven-plugin to assertj-core and assertj-guava</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Require in OBS junit5-minimal to avoid provider choice</changelog>
</package>
<package pkgid="f7a425deef0528802584c6641a885860fd5920aa70732b1d3a768cca798da563" name="aws-cli" arch="noarch">
  <version epoch="0" ver="1.32.31" rel="150400.35.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1674820800">- Update to version 1.27.58
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.58/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675425600">- Update to version 1.27.60
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.60/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675857600">- Update to version 1.27.66
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.66/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1676462400">- Update to version 1.27.71
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.71/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677240000">- Update to version 1.27.78
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.78/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1678708800">- Update to version 1.27.89
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.89/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1681905600">- Update to version 1.27.115
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.115/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683633600">- Update to version 1.27.130
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.130/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1686744000">- Update to version 1.27.153
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.153/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688040000">- Update to version 1.27.163
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.163/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689076800">- Update to version 1.29.2
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.29.2/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1692273600">- Update to version 1.29.27
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.29.27/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1693396800">- Update to version 1.29.36
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.29.27/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1696593600">- Update to version 1.29.61
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.29.61/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1700827200">- Update to version 1.30.6
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.30.6/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1702296000">- Update to version 1.31.11
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.31.11/CHANGELOG.rst
- Add patch to update docutils dependency (bsc#1217336)
  + ac_update-docutils.patch
- Update Requires in spec file from setup.py</changelog>
  <changelog author="rjschwei@suse.com" date="1706702400">- Switch to Python 3.11 build in SLE 15 SP4 and openSUSE Leap 15.4 and
  later (jsc#PCT-371)
- Switch to wheel build
- Update to version 1.32.31
  * Forward port ac_update-docutils.patch
  * api-change:``datazone``: Add new skipDeletionCheck to DeleteDomain. Add
    new skipDeletionCheck to DeleteProject which also automatically deletes
    dependent objects
  * api-change:``route53``: Update the SDKs for text changes in the APIs.
- From 1.32.30
  * api-change:``autoscaling``: EC2 Auto Scaling customers who use attribute
    based instance-type selection can now intuitively define their Spot
    instances price protection limit as a percentage of the lowest priced
    On-Demand instance type.
  * api-change:``comprehend``: Comprehend PII analysis now supports Spanish
    input documents.
  * api-change:``ec2``: EC2 Fleet customers who use attribute based
    instance-type selection can now intuitively define their Spot instances
    price protection limit as a percentage of the lowest priced On-Demand
    instance type.
  * api-change:``mwaa``: This release adds MAINTENANCE environment status for
    Amazon MWAA environments.
  * api-change:``rds``: Introduced support for the
    InsufficientDBInstanceCapacityFault error in the RDS
    RestoreDBClusterFromSnapshot and RestoreDBClusterToPointInTime API methods.
    This provides enhanced error handling, ensuring a more robust experience.
  * api-change:``snowball``: Modified description of createaddress to include
    direction to add path when providing a JSON file.
- From 1.32.29
  * api-change:``connect``: Update list and string length limits for predefined
    attributes.
  * api-change:``inspector2``: This release adds ECR container image scanning
    based on their lastRecordedPullTime.
  * api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now
    provides an API to programmatically delete tuning jobs.
- From 1.32.28
  * api-change:``acm-pca``: AWS Private CA now supports an option to omit the
    CDP extension from issued certificates, when CRL revocation is enabled.
  * api-change:``lightsail``: This release adds support for IPv6-only instance
    plans.
- From 1.32.27
  * api-change:``ec2``: Introduced a new clientToken request parameter on
    CreateNetworkAcl and CreateRouteTable APIs. The clientToken parameter
    allows idempotent operations on the APIs.
  * api-change:``ecs``: Documentation updates for Amazon ECS.
  * api-change:``outposts``: DeviceSerialNumber parameter is now optional in
    StartConnection API
  * api-change:``rds``: This release adds support for Aurora Limitless Database.
  * api-change:``storagegateway``: Add DeprecationDate and SoftwareVersion to
    response of ListGateways.
- From 1.32.26
  * api-change:``inspector2``: This release adds support for CIS scans on EC2
    instances.
- From 1.32.25
  * bugfix:``s3 sync``: Disable S3 Express support for s3 sync command
- From 1.32.24
  * api-change:``appconfigdata``: Fix FIPS Endpoints in aws-us-gov.
  * api-change:``cloud9``: Doc-only update around removing AL1 from list of
    available AMIs for Cloud9
  * api-change:``cloudfront-keyvaluestore``: This release improves upon the
    DescribeKeyValueStore API by returning two additional fields, Status of the
    KeyValueStore and the FailureReason in case of failures during creation of
    KeyValueStore.
  * api-change:``connectcases``: This release adds the ability to view audit
    history on a case and introduces a new parameter, performedBy, for
    CreateCase and UpdateCase API's.
  * api-change:``ec2``: Documentation updates for Amazon EC2.
  * api-change:``ecs``: This release adds support for Transport Layer Security
    (TLS) and Configurable Timeout to ECS Service Connect. TLS facilitates
    privacy and data security for inter-service communications, while
    Configurable Timeout allows customized per-request timeout and idle timeout
    for Service Connect services.
  * api-change:``finspace``: Allow customer to set zip default through command
    line arguments.
  * api-change:``organizations``: Doc only update for quota increase change
  * api-change:``rds``: Introduced support for the
    InsufficientDBInstanceCapacityFault error in the RDS CreateDBCluster API
    method. This provides enhanced error handling, ensuring a more robust
    experience when creating database clusters with insufficient instance
    capacity.
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
- From 1.32.23
  * api-change:``athena``: Introducing new NotebookS3LocationUri parameter to
    Athena ImportNotebook API. Payload is no longer required and either Payload
    or NotebookS3LocationUri needs to be provided (not both) for a successful
    ImportNotebook API call. If both are provided, an InvalidRequestException
    will be thrown.
  * api-change:``codebuild``: Release CodeBuild Reserved Capacity feature
  * api-change:``dynamodb``: This release adds support for including
    ApproximateCreationDateTimePrecision configurations in
    EnableKinesisStreamingDestination API, adds the same as an optional field
    in the response of DescribeKinesisStreamingDestination, and adds support
    for a new UpdateKinesisStreamingDestination API.
  * api-change:``qconnect``: Increased Quick Response name max length to 100
- From 1.32.22
  * api-change:``b2bi``: Increasing TestMapping inputFileContent file size
    limit to 5MB and adding file size limit 250KB for TestParsing input file.
    This release also includes exposing InternalServerException for Tag APIs.
  * api-change:``cloudtrail``: This release adds a new API
    ListInsightsMetricData to retrieve metric data from CloudTrail Insights.
  * api-change:``connect``: GetMetricDataV2 now supports 3 groupings
  * api-change:``drs``: Removed invalid and unnecessary default values.
  * api-change:``firehose``: Allow support for Snowflake as a Kinesis Data
    Firehose delivery destination.
  * api-change:``sagemaker-featurestore-runtime``: Increase BatchGetRecord
    limits from 10 items to 100 items
- From 1.32.21
  * api-change:``dynamodb``: Updating note for enabling streams for UpdateTable.
  * api-change:``keyspaces``: This release adds support for Multi-Region
    Replication with provisioned tables, and Keyspaces auto scaling APIs
- From 1.32.20
  * api-change:``iot``: Revert release of LogTargetTypes
  * api-change:``iotfleetwise``: Updated APIs: SignalNodeType query parameter
    has been added to ListSignalCatalogNodesRequest and ListVehiclesResponse
    has been extended with attributes field.
  * api-change:``macie2``: This release adds support for analyzing Amazon S3
    objects that are encrypted using dual-layer server-side encryption with
    AWS KMS keys (DSSE-KMS). It also adds support for reporting DSSE-KMS
    details in statistics and metadata about encryption settings for S3 buckets
    and objects.
  * api-change:``payment-cryptography``: Provide an additional option for key
    exchange using RSA wrap/unwrap in addition to tr-34/tr-31 in ImportKey and
    ExportKey operations. Added new key usage (type)
    TR31_M1_ISO_9797_1_MAC_KEY, for use with Generate/VerifyMac dataplane
    operations  with ISO9797 Algorithm 1 MAC calculations.
  * api-change:``personalize-runtime``: Documentation updates for Amazon
    Personalize
  * api-change:``personalize``: Documentation updates for Amazon Personalize.
  * api-change:``rekognition``: This release adds ContentType and TaxonomyLevel
    attributes to DetectModerationLabels and GetMediaAnalysisJob API responses.
  * api-change:``securityhub``: Documentation updates for AWS Security Hub
- From 1.32.19
  * api-change:``sagemaker``: This release will have ValidationException thrown
    if certain invalid app types are provided. The release will also throw
    ValidationException if more than 10 account ids are provided in
    VpcOnlyTrustedAccounts.
- From 1.32.18
  * api-change:``connect``: Supervisor Barge for Chat is now supported through
    the MonitorContact API.
  * api-change:``connectparticipant``: Introduce new Supervisor participant
    role
  * api-change:``location``: Location SDK documentation update. Added missing
    fonts to the MapConfiguration data type. Updated note for the
    SubMunicipality property in the place data type.
  * api-change:``mwaa``: This Amazon MWAA feature release includes new fields
    in CreateWebLoginToken response model. The new fields IamIdentity and
    AirflowIdentity will let you match identifications, as the Airflow identity
    length is currently hashed to 64 characters.
  * api-change:``s3control``: S3 On Outposts team adds dualstack endpoints
    support for S3Control and S3Outposts API calls.
  * api-change:``supplychain``: This release includes APIs
    CreateBillOfMaterialsImportJob and GetBillOfMaterialsImportJob.
  * api-change:``transfer``: AWS Transfer Family now supports static IP
    addresses for SFTP &amp; AS2 connectors and for async MDNs on AS2 servers.
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
- From 1.32.17
  * api-change:``ec2``: This release adds support for adding an
    ElasticBlockStorage volume configurations in ECS
    RunTask/StartTask/CreateService/UpdateService APIs. The configuration
    allows for attaching EBS volumes to ECS Tasks.
  * api-change:``ecs``: This release adds support for adding an
    ElasticBlockStorage volume configurations in ECS
    RunTask/StartTask/CreateService/UpdateService APIs. The configuration
    allows for attaching EBS volumes to ECS Tasks.
  * api-change:``events``: Update events command to latest version
  * api-change:``iot``: Add ConflictException to Update APIs of AWS IoT
    Software Package Catalog
  * api-change:``iotfleetwise``: The following dataTypes have been removed:
    CUSTOMER_DECODED_INTERFACE in NetworkInterfaceType;
    CUSTOMER_DECODED_SIGNAL_INFO_IS_NULL in SignalDecoderFailureReason;
    CUSTOMER_DECODED_SIGNAL_NETWORK_INTERFACE_INFO_IS_NULL in
    NetworkInterfaceFailureReason; CUSTOMER_DECODED_SIGNAL in SignalDecoderType
  * api-change:``secretsmanager``: Doc only update for Secrets Manager
  * api-change:``workspaces``: Added AWS Workspaces RebootWorkspaces
    API - Extended Reboot documentation update
- From 1.32.16
  * api-change:``connectcampaigns``: Minor pattern updates for Campaign and
    Dial Request API fields.
  * api-change:``location``: This release adds API support for custom layers
    for the maps service APIs: CreateMap, UpdateMap, DescribeMap.
  * api-change:``logs``: Add support for account level subscription filter
    policies to PutAccountPolicy, DescribeAccountPolicies, and
    DeleteAccountPolicy APIs. Additionally, PutAccountPolicy has been modified
    with new optional "selectionCriteria" parameter for resource selection.
  * api-change:``qconnect``: QueryAssistant and GetRecommendations will be
    discontinued starting June 1, 2024. To receive generative responses after
    March 1, 2024 you will need to create a new Assistant in the Connect
    console and integrate the Amazon Q in Connect JavaScript library
    (amazon-q-connectjs) into your applications.
  * api-change:``redshift-serverless``: Updates to ConfigParameter for RSS
    workgroup, removal of use_fips_ssl
  * api-change:``route53``: Route53 now supports geoproximity routing in AWS
    regions
  * api-change:``wisdom``: QueryAssistant and GetRecommendations will be
    discontinued starting June 1, 2024. To receive generative responses after
    March 1, 2024 you will need to create a new Assistant in the Connect
    console and integrate the Amazon Q in Connect JavaScript library
    (amazon-q-connectjs) into your applications.
- From 1.32.15
  * api-change:``codebuild``: Aws CodeBuild now supports new compute type
    BUILD_GENERAL1_XLARGE
  * api-change:``ec2``: Amazon EC2 R7iz bare metal instances are powered by
    custom 4th generation Intel Xeon Scalable processors.
  * api-change:``route53resolver``: This release adds support for query type
    configuration on firewall rules that enables customers for granular action
    (ALLOW, ALERT, BLOCK) by DNS query type.
- From 1.32.14
  * api-change:``connect``: Minor trait updates for User APIs
  * api-change:``kms``: Documentation updates for AWS Key Management Service
    (KMS).
  * api-change:``redshift-serverless``: use_fips_ssl and require_ssl parameter
    support for Workgroup, UpdateWorkgroup, and CreateWorkgroup
- From 1.32.13
  * api-change:``config``: Updated ResourceType enum with new resource types onboarded by AWS Config in November and December 2023.
  * api-change:``docdb``: Adding PerformanceInsightsEnabled and
    PerformanceInsightsKMSKeyId fields to DescribeDBInstances Response.
  * api-change:``ecs``: This release adds support for managed instance
    draining which facilitates graceful termination of Amazon ECS instances.
  * api-change:``es``: This release adds support for new or existing Amazon
    OpenSearch domains to enable TLS 1.3 or TLS 1.2 with perfect forward
    secrecy cipher suites for domain endpoints.
  * api-change:``lightsail``: This release adds support to set up an HTTPS
    endpoint on an instance.
  * api-change:``opensearch``: This release adds support for new or existing
    Amazon OpenSearch domains to enable TLS 1.3 or TLS 1.2 with perfect forward
    secrecy cipher suites for domain endpoints.
  * api-change:``sagemaker``: Adding support for provisioned throughput mode
    for SageMaker Feature Groups
  * api-change:``servicecatalog``: Added Idempotency token support to Service
    Catalog  AssociateServiceActionWithProvisioningArtifact,
    DisassociateServiceActionFromProvisioningArtifact, DeleteServiceAction API
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
- From 1.32.12
  * api-change:``connect``: Amazon Connect, Contact Lens Evaluation API
    increase evaluation notes max length to 3072.
  * api-change:``mediaconvert``: This release includes video engine updates
    including HEVC improvements, support for ingesting VP9 encoded video in
    MP4 containers, and support for user-specified 3D LUTs.
- From 1.32.11
  * api-change:``apprunner``: AWS App Runner adds Python 3.11 and Node.js 18
    runtimes.
  * api-change:``location``: This release introduces a new parameter to
    bypasses an API key's expiry conditions and delete the key.
  * api-change:``quicksight``: Add LinkEntityArn support for different
    partitions; Add UnsupportedUserEditionException in UpdateDashboardLinks
    API; Add support for New Reader Experience Topics
- From 1.32.10
  * api-change:``codestar-connections``: New integration with the GitLab
    self-managed provider type.
  * api-change:``kinesis-video-archived-media``: NoDataRetentionException
    thrown when GetImages requested for a Stream that does not retain data
    (that is, has a DataRetentionInHours of 0).
  * api-change:``sagemaker``: Amazon SageMaker Studio now supports Docker
    access from within app container
- From 1.32.9
  * api-change:``emr``: Update emr command to latest version
- From 1.32.8
  * api-change:``iam``: Documentation updates for AWS Identity and Access
    Management (IAM).
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
- From 1.32.7
  * api-change:``bedrock-agent``: Adding Claude 2.1 support to Bedrock Agents
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
  * api-change:``glue``: This release adds additional configurations for Query
    Session Context on the following APIs: GetUnfilteredTableMetadata,
    GetUnfilteredPartitionMetadata, GetUnfilteredPartitionsMetadata.
  * api-change:``lakeformation``: This release adds additional configurations
    on GetTemporaryGlueTableCredentials for Query Session Context.
  * api-change:``mediaconnect``: This release adds the DescribeSourceMetadata
    API. This API can be used to view the stream information of the flow's
    source.
  * api-change:``networkmonitor``: CloudWatch Network Monitor is a new service
    within CloudWatch that will help network administrators and operators
    continuously monitor network performance metrics such as round-trip-time
    and packet loss between their AWS-hosted applications and their on-premises
    locations.
  * api-change:``omics``: Provides minor corrections and an updated description
    of APIs.
  * api-change:``secretsmanager``: Update endpoint rules and examples.
- From 1.32.6
  * api-change:``amp``: This release updates Amazon Managed Service for
    Prometheus APIs to support customer managed KMS keys.
  * api-change:``appintegrations``: The Amazon AppIntegrations service adds
    DeleteApplication API for deleting applications, and updates APIs to
    support third party applications reacting to workspace events and make
    data requests to Amazon Connect for agent and contact events.
  * api-change:``bedrock-agent``: This release introduces Amazon Aurora as a
    vector store on Knowledge Bases for Amazon Bedrock
  * api-change:``codecommit``: AWS CodeCommit now supports customer managed
    keys from AWS Key Management Service. UpdateRepositoryEncryptionKey is
    added for updating the key configuration. CreateRepository, GetRepository,
    BatchGetRepositories are updated with new input or output parameters.
  * api-change:``connect``: Adds APIs to manage User Proficiencies and
    Predefined Attributes. Enhances StartOutboundVoiceContact API input.
    Introduces SearchContacts API. Enhances DescribeContact API. Adds an API to
    update Routing Attributes in QueuePriority and QueueTimeAdjustmentSeconds.
  * api-change:``medialive``: MediaLive now supports the ability to configure
    the audio that an AWS Elemental Link UHD device produces, when the device
    is configured as the source for a flow in AWS Elemental MediaConnect.
  * api-change:``neptune-graph``: Adds Waiters for successful creation and
    deletion of Graph, Graph Snapshot, Import Task and Private Endpoints for
    Neptune Analytics
  * api-change:``rds-data``: This release adds support for using RDS Data API
    with Aurora PostgreSQL Serverless v2 and provisioned DB clusters.
  * api-change:``rds``: This release adds support for using RDS Data API with
    Aurora PostgreSQL Serverless v2 and provisioned DB clusters.
  * api-change:``sagemaker``: Amazon SageMaker Training now provides model
    training container access for debugging purposes. Amazon SageMaker Search
    now provides the ability to use visibility conditions to limit resource
    access to a single domain or multiple domains.
- From 1.32.5
  * api-change:``appstream``: This release introduces configurable clipboard,
    allowing admins to specify the maximum length of text that can be copied by
    the users from their device to the remote session and vice-versa.
  * api-change:``eks``: Add support for cluster insights, new EKS capability
    that surfaces potentially upgrade impacting issues.
  * api-change:``guardduty``: This release 1) introduces a new API:
    GetOrganizationStatistics , and 2) adds a new UsageStatisticType
    TOP_ACCOUNTS_BY_FEATURE for GetUsageStatistics API
  * api-change:``managedblockchain-query``: Adding Confirmation Status and
    Execution Status to GetTransaction Response.
  * api-change:``mediatailor``: Adds the ability to configure time shifting on
    MediaTailor channels using the TimeShiftConfiguration field
  * api-change:``route53``: Amazon Route 53 now supports the Canada West
    (Calgary) Region (ca-west-1) for latency records, geoproximity records,
    and private DNS for Amazon VPCs in that region.
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
- From 1.32.4
  * api-change:``appsync``: This release adds additional configurations on
    GraphQL APIs for limits on query depth, resolver count, and introspection
  * api-change:``chime-sdk-meetings``: Add meeting features to specify a
    maximum camera resolution, a maximum content sharing resolution, and a
    maximum number of attendees for a given meeting.
  * api-change:``ec2``: Provision BYOIPv4 address ranges and advertise them by
    specifying the network border groups option in Los Angeles, Phoenix and
    Dallas AWS Local Zones.
  * api-change:``fsx``: Added support for FSx for OpenZFS on-demand data
    replication across AWS accounts and/or regions.Added the IncludeShared
    attribute for DescribeSnapshots.Added the CopyStrategy attribute for
    OpenZFSVolumeConfiguration.
  * api-change:``marketplace-catalog``: AWS Marketplace now supports a new API,
    BatchDescribeEntities, which returns metadata and content for multiple
    entities.
  * api-change:``rds``: RDS - The release adds two new APIs:
    DescribeDBRecommendations and ModifyDBRecommendation
- From 1.32.3
  * api-change:``cognito-idp``: Amazon Cognito now supports trigger versions
    that define the fields in the request sent to pre token generation Lambda
    triggers.
  * api-change:``eks``: Add support for EKS Cluster Access Management.
  * api-change:``quicksight``: A docs-only release to add missing entities to
    the API reference.
  * api-change:``route53resolver``: Add DOH protocols in resolver endpoints.
- From 1.32.2
  * enhancement:``cloudformation package``: Add support for intrinsic
    Fn:ForEach (fixes `#8075 &lt;https://github.com/aws/aws-cli/issues/8075&gt;`__)
  * api-change:``cloud9``: Updated Cloud9 API documentation for AL2023 release
  * api-change:``connect``: Adds relatedContactId field to
    StartOutboundVoiceContact API input. Introduces PauseContact API and
    ResumeContact API for Task contacts. Adds pause duration, number of pauses,
    timestamps for last paused and resumed events to DescribeContact API
    response. Adds new Rule type and new Rule action.
  * api-change:``connectcases``: Increase number of fields that can be included
    in CaseEventIncludedData from 50 to 200
  * api-change:``kms``: Documentation updates for AWS Key Management Service
  * api-change:``rds``: Updates Amazon RDS documentation by adding code examples
  * api-change:``sagemaker``: This release 1) introduces a new API:
    DeleteCompilationJob , and 2) adds InfraCheckConfig for Create/Describe
    training job API
- From 1.32.1
  * api-change:``appstream``: This release includes support for images of
    Windows Server 2022 platform.
  * api-change:``b2bi``: Documentation updates for AWS B2B Data Interchange
  * api-change:``billingconductor``: Billing Conductor is releasing a new API,
    GetBillingGroupCostReport, which provides the ability to retrieve/view the
    Billing Group Cost Report broken down by attributes for a specific billing
    group.
  * api-change:``connect``: This release adds support for more granular
    billing using tags (key:value pairs)
  * api-change:``controltower``: Documentation updates for AWS Control Tower.
  * api-change:``firehose``: This release, 1) adds configurable buffering hints
    for the Splunk destination, and 2) reduces the minimum configurable
    buffering interval for supported destinations
  * api-change:``gamelift``: Amazon GameLift adds the ability to add and update
    the game properties of active game sessions.
  * api-change:``iot``: This release adds the ability to self-manage
    certificate signing in AWS IoT Core fleet provisioning using the new
    certificate provider resource.
  * api-change:``neptune-graph``: This is the initial SDK release for Amazon
    Neptune Analytics
  * api-change:``opensearch``: Updating documentation for Amazon OpenSearch
    Service support for new zero-ETL integration with Amazon S3.
  * api-change:``quicksight``: Update Dashboard Links support;
    SingleAxisOptions support; Scatterplot Query limit support.
  * api-change:``workspaces``: Updated note to ensure customers understand
    running modes.
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
- From 1.32.0
  * feature:Python: End of support for Python 3.7
  * api-change:``drs``: Adding AgentVersion to SourceServer and
    RecoveryInstance structures
  * feature:Python: End of support for Python 3.7
- From 1.31.13
  * api-change:``imagebuilder``: This release adds the Image Workflows feature
    to give more flexibility and control over the image building and testing
    process.
  * api-change:``location``: This release 1)  adds sub-municipality field in
    Places API for searching and getting places information, and 2) allows
    optimizing route calculation based on expected arrival time.
  * api-change:``logs``: This release introduces the StartLiveTail API to tail
    ingested logs in near real time.
- From 1.31.12
  * api-change:``neptune``: This release adds a new parameter configuration
    setting to the Neptune cluster related APIs that can be leveraged to
    switch between the underlying supported storage modes.
  * api-change:``pinpoint``: This release includes Amazon Pinpoint API
    documentation updates pertaining to campaign message sending rate limits.
  * api-change:``securityhub``: Added new resource detail objects to ASFF,
    including resources for AwsDynamoDbTable, AwsEc2ClientVpnEndpoint,
    AwsMskCluster, AwsS3AccessPoint, AwsS3Bucket
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="rjschwei@suse.com" date="1710331200">- Reconfigure the spec file support builds better in Factory and SLE
  supporting different Python interpreter versions</changelog>
</package>
<package pkgid="203ca79e4fb2f1b587df7263c9df1408e545431363515103b1151f7ab5e53bc9" name="aws-cli" arch="src">
  <version epoch="0" ver="1.32.31" rel="150400.35.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1674820800">- Update to version 1.27.58
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.58/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675425600">- Update to version 1.27.60
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.60/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675857600">- Update to version 1.27.66
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.66/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1676462400">- Update to version 1.27.71
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.71/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677240000">- Update to version 1.27.78
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.78/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1678708800">- Update to version 1.27.89
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.89/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1681905600">- Update to version 1.27.115
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.115/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683633600">- Update to version 1.27.130
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.130/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1686744000">- Update to version 1.27.153
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.153/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688040000">- Update to version 1.27.163
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.163/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689076800">- Update to version 1.29.2
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.29.2/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1692273600">- Update to version 1.29.27
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.29.27/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1693396800">- Update to version 1.29.36
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.29.27/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1696593600">- Update to version 1.29.61
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.29.61/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1700827200">- Update to version 1.30.6
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.30.6/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1702296000">- Update to version 1.31.11
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.31.11/CHANGELOG.rst
- Add patch to update docutils dependency (bsc#1217336)
  + ac_update-docutils.patch
- Update Requires in spec file from setup.py</changelog>
  <changelog author="rjschwei@suse.com" date="1706702400">- Switch to Python 3.11 build in SLE 15 SP4 and openSUSE Leap 15.4 and
  later (jsc#PCT-371)
- Switch to wheel build
- Update to version 1.32.31
  * Forward port ac_update-docutils.patch
  * api-change:``datazone``: Add new skipDeletionCheck to DeleteDomain. Add
    new skipDeletionCheck to DeleteProject which also automatically deletes
    dependent objects
  * api-change:``route53``: Update the SDKs for text changes in the APIs.
- From 1.32.30
  * api-change:``autoscaling``: EC2 Auto Scaling customers who use attribute
    based instance-type selection can now intuitively define their Spot
    instances price protection limit as a percentage of the lowest priced
    On-Demand instance type.
  * api-change:``comprehend``: Comprehend PII analysis now supports Spanish
    input documents.
  * api-change:``ec2``: EC2 Fleet customers who use attribute based
    instance-type selection can now intuitively define their Spot instances
    price protection limit as a percentage of the lowest priced On-Demand
    instance type.
  * api-change:``mwaa``: This release adds MAINTENANCE environment status for
    Amazon MWAA environments.
  * api-change:``rds``: Introduced support for the
    InsufficientDBInstanceCapacityFault error in the RDS
    RestoreDBClusterFromSnapshot and RestoreDBClusterToPointInTime API methods.
    This provides enhanced error handling, ensuring a more robust experience.
  * api-change:``snowball``: Modified description of createaddress to include
    direction to add path when providing a JSON file.
- From 1.32.29
  * api-change:``connect``: Update list and string length limits for predefined
    attributes.
  * api-change:``inspector2``: This release adds ECR container image scanning
    based on their lastRecordedPullTime.
  * api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now
    provides an API to programmatically delete tuning jobs.
- From 1.32.28
  * api-change:``acm-pca``: AWS Private CA now supports an option to omit the
    CDP extension from issued certificates, when CRL revocation is enabled.
  * api-change:``lightsail``: This release adds support for IPv6-only instance
    plans.
- From 1.32.27
  * api-change:``ec2``: Introduced a new clientToken request parameter on
    CreateNetworkAcl and CreateRouteTable APIs. The clientToken parameter
    allows idempotent operations on the APIs.
  * api-change:``ecs``: Documentation updates for Amazon ECS.
  * api-change:``outposts``: DeviceSerialNumber parameter is now optional in
    StartConnection API
  * api-change:``rds``: This release adds support for Aurora Limitless Database.
  * api-change:``storagegateway``: Add DeprecationDate and SoftwareVersion to
    response of ListGateways.
- From 1.32.26
  * api-change:``inspector2``: This release adds support for CIS scans on EC2
    instances.
- From 1.32.25
  * bugfix:``s3 sync``: Disable S3 Express support for s3 sync command
- From 1.32.24
  * api-change:``appconfigdata``: Fix FIPS Endpoints in aws-us-gov.
  * api-change:``cloud9``: Doc-only update around removing AL1 from list of
    available AMIs for Cloud9
  * api-change:``cloudfront-keyvaluestore``: This release improves upon the
    DescribeKeyValueStore API by returning two additional fields, Status of the
    KeyValueStore and the FailureReason in case of failures during creation of
    KeyValueStore.
  * api-change:``connectcases``: This release adds the ability to view audit
    history on a case and introduces a new parameter, performedBy, for
    CreateCase and UpdateCase API's.
  * api-change:``ec2``: Documentation updates for Amazon EC2.
  * api-change:``ecs``: This release adds support for Transport Layer Security
    (TLS) and Configurable Timeout to ECS Service Connect. TLS facilitates
    privacy and data security for inter-service communications, while
    Configurable Timeout allows customized per-request timeout and idle timeout
    for Service Connect services.
  * api-change:``finspace``: Allow customer to set zip default through command
    line arguments.
  * api-change:``organizations``: Doc only update for quota increase change
  * api-change:``rds``: Introduced support for the
    InsufficientDBInstanceCapacityFault error in the RDS CreateDBCluster API
    method. This provides enhanced error handling, ensuring a more robust
    experience when creating database clusters with insufficient instance
    capacity.
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
- From 1.32.23
  * api-change:``athena``: Introducing new NotebookS3LocationUri parameter to
    Athena ImportNotebook API. Payload is no longer required and either Payload
    or NotebookS3LocationUri needs to be provided (not both) for a successful
    ImportNotebook API call. If both are provided, an InvalidRequestException
    will be thrown.
  * api-change:``codebuild``: Release CodeBuild Reserved Capacity feature
  * api-change:``dynamodb``: This release adds support for including
    ApproximateCreationDateTimePrecision configurations in
    EnableKinesisStreamingDestination API, adds the same as an optional field
    in the response of DescribeKinesisStreamingDestination, and adds support
    for a new UpdateKinesisStreamingDestination API.
  * api-change:``qconnect``: Increased Quick Response name max length to 100
- From 1.32.22
  * api-change:``b2bi``: Increasing TestMapping inputFileContent file size
    limit to 5MB and adding file size limit 250KB for TestParsing input file.
    This release also includes exposing InternalServerException for Tag APIs.
  * api-change:``cloudtrail``: This release adds a new API
    ListInsightsMetricData to retrieve metric data from CloudTrail Insights.
  * api-change:``connect``: GetMetricDataV2 now supports 3 groupings
  * api-change:``drs``: Removed invalid and unnecessary default values.
  * api-change:``firehose``: Allow support for Snowflake as a Kinesis Data
    Firehose delivery destination.
  * api-change:``sagemaker-featurestore-runtime``: Increase BatchGetRecord
    limits from 10 items to 100 items
- From 1.32.21
  * api-change:``dynamodb``: Updating note for enabling streams for UpdateTable.
  * api-change:``keyspaces``: This release adds support for Multi-Region
    Replication with provisioned tables, and Keyspaces auto scaling APIs
- From 1.32.20
  * api-change:``iot``: Revert release of LogTargetTypes
  * api-change:``iotfleetwise``: Updated APIs: SignalNodeType query parameter
    has been added to ListSignalCatalogNodesRequest and ListVehiclesResponse
    has been extended with attributes field.
  * api-change:``macie2``: This release adds support for analyzing Amazon S3
    objects that are encrypted using dual-layer server-side encryption with
    AWS KMS keys (DSSE-KMS). It also adds support for reporting DSSE-KMS
    details in statistics and metadata about encryption settings for S3 buckets
    and objects.
  * api-change:``payment-cryptography``: Provide an additional option for key
    exchange using RSA wrap/unwrap in addition to tr-34/tr-31 in ImportKey and
    ExportKey operations. Added new key usage (type)
    TR31_M1_ISO_9797_1_MAC_KEY, for use with Generate/VerifyMac dataplane
    operations  with ISO9797 Algorithm 1 MAC calculations.
  * api-change:``personalize-runtime``: Documentation updates for Amazon
    Personalize
  * api-change:``personalize``: Documentation updates for Amazon Personalize.
  * api-change:``rekognition``: This release adds ContentType and TaxonomyLevel
    attributes to DetectModerationLabels and GetMediaAnalysisJob API responses.
  * api-change:``securityhub``: Documentation updates for AWS Security Hub
- From 1.32.19
  * api-change:``sagemaker``: This release will have ValidationException thrown
    if certain invalid app types are provided. The release will also throw
    ValidationException if more than 10 account ids are provided in
    VpcOnlyTrustedAccounts.
- From 1.32.18
  * api-change:``connect``: Supervisor Barge for Chat is now supported through
    the MonitorContact API.
  * api-change:``connectparticipant``: Introduce new Supervisor participant
    role
  * api-change:``location``: Location SDK documentation update. Added missing
    fonts to the MapConfiguration data type. Updated note for the
    SubMunicipality property in the place data type.
  * api-change:``mwaa``: This Amazon MWAA feature release includes new fields
    in CreateWebLoginToken response model. The new fields IamIdentity and
    AirflowIdentity will let you match identifications, as the Airflow identity
    length is currently hashed to 64 characters.
  * api-change:``s3control``: S3 On Outposts team adds dualstack endpoints
    support for S3Control and S3Outposts API calls.
  * api-change:``supplychain``: This release includes APIs
    CreateBillOfMaterialsImportJob and GetBillOfMaterialsImportJob.
  * api-change:``transfer``: AWS Transfer Family now supports static IP
    addresses for SFTP &amp; AS2 connectors and for async MDNs on AS2 servers.
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
- From 1.32.17
  * api-change:``ec2``: This release adds support for adding an
    ElasticBlockStorage volume configurations in ECS
    RunTask/StartTask/CreateService/UpdateService APIs. The configuration
    allows for attaching EBS volumes to ECS Tasks.
  * api-change:``ecs``: This release adds support for adding an
    ElasticBlockStorage volume configurations in ECS
    RunTask/StartTask/CreateService/UpdateService APIs. The configuration
    allows for attaching EBS volumes to ECS Tasks.
  * api-change:``events``: Update events command to latest version
  * api-change:``iot``: Add ConflictException to Update APIs of AWS IoT
    Software Package Catalog
  * api-change:``iotfleetwise``: The following dataTypes have been removed:
    CUSTOMER_DECODED_INTERFACE in NetworkInterfaceType;
    CUSTOMER_DECODED_SIGNAL_INFO_IS_NULL in SignalDecoderFailureReason;
    CUSTOMER_DECODED_SIGNAL_NETWORK_INTERFACE_INFO_IS_NULL in
    NetworkInterfaceFailureReason; CUSTOMER_DECODED_SIGNAL in SignalDecoderType
  * api-change:``secretsmanager``: Doc only update for Secrets Manager
  * api-change:``workspaces``: Added AWS Workspaces RebootWorkspaces
    API - Extended Reboot documentation update
- From 1.32.16
  * api-change:``connectcampaigns``: Minor pattern updates for Campaign and
    Dial Request API fields.
  * api-change:``location``: This release adds API support for custom layers
    for the maps service APIs: CreateMap, UpdateMap, DescribeMap.
  * api-change:``logs``: Add support for account level subscription filter
    policies to PutAccountPolicy, DescribeAccountPolicies, and
    DeleteAccountPolicy APIs. Additionally, PutAccountPolicy has been modified
    with new optional "selectionCriteria" parameter for resource selection.
  * api-change:``qconnect``: QueryAssistant and GetRecommendations will be
    discontinued starting June 1, 2024. To receive generative responses after
    March 1, 2024 you will need to create a new Assistant in the Connect
    console and integrate the Amazon Q in Connect JavaScript library
    (amazon-q-connectjs) into your applications.
  * api-change:``redshift-serverless``: Updates to ConfigParameter for RSS
    workgroup, removal of use_fips_ssl
  * api-change:``route53``: Route53 now supports geoproximity routing in AWS
    regions
  * api-change:``wisdom``: QueryAssistant and GetRecommendations will be
    discontinued starting June 1, 2024. To receive generative responses after
    March 1, 2024 you will need to create a new Assistant in the Connect
    console and integrate the Amazon Q in Connect JavaScript library
    (amazon-q-connectjs) into your applications.
- From 1.32.15
  * api-change:``codebuild``: Aws CodeBuild now supports new compute type
    BUILD_GENERAL1_XLARGE
  * api-change:``ec2``: Amazon EC2 R7iz bare metal instances are powered by
    custom 4th generation Intel Xeon Scalable processors.
  * api-change:``route53resolver``: This release adds support for query type
    configuration on firewall rules that enables customers for granular action
    (ALLOW, ALERT, BLOCK) by DNS query type.
- From 1.32.14
  * api-change:``connect``: Minor trait updates for User APIs
  * api-change:``kms``: Documentation updates for AWS Key Management Service
    (KMS).
  * api-change:``redshift-serverless``: use_fips_ssl and require_ssl parameter
    support for Workgroup, UpdateWorkgroup, and CreateWorkgroup
- From 1.32.13
  * api-change:``config``: Updated ResourceType enum with new resource types onboarded by AWS Config in November and December 2023.
  * api-change:``docdb``: Adding PerformanceInsightsEnabled and
    PerformanceInsightsKMSKeyId fields to DescribeDBInstances Response.
  * api-change:``ecs``: This release adds support for managed instance
    draining which facilitates graceful termination of Amazon ECS instances.
  * api-change:``es``: This release adds support for new or existing Amazon
    OpenSearch domains to enable TLS 1.3 or TLS 1.2 with perfect forward
    secrecy cipher suites for domain endpoints.
  * api-change:``lightsail``: This release adds support to set up an HTTPS
    endpoint on an instance.
  * api-change:``opensearch``: This release adds support for new or existing
    Amazon OpenSearch domains to enable TLS 1.3 or TLS 1.2 with perfect forward
    secrecy cipher suites for domain endpoints.
  * api-change:``sagemaker``: Adding support for provisioned throughput mode
    for SageMaker Feature Groups
  * api-change:``servicecatalog``: Added Idempotency token support to Service
    Catalog  AssociateServiceActionWithProvisioningArtifact,
    DisassociateServiceActionFromProvisioningArtifact, DeleteServiceAction API
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
- From 1.32.12
  * api-change:``connect``: Amazon Connect, Contact Lens Evaluation API
    increase evaluation notes max length to 3072.
  * api-change:``mediaconvert``: This release includes video engine updates
    including HEVC improvements, support for ingesting VP9 encoded video in
    MP4 containers, and support for user-specified 3D LUTs.
- From 1.32.11
  * api-change:``apprunner``: AWS App Runner adds Python 3.11 and Node.js 18
    runtimes.
  * api-change:``location``: This release introduces a new parameter to
    bypasses an API key's expiry conditions and delete the key.
  * api-change:``quicksight``: Add LinkEntityArn support for different
    partitions; Add UnsupportedUserEditionException in UpdateDashboardLinks
    API; Add support for New Reader Experience Topics
- From 1.32.10
  * api-change:``codestar-connections``: New integration with the GitLab
    self-managed provider type.
  * api-change:``kinesis-video-archived-media``: NoDataRetentionException
    thrown when GetImages requested for a Stream that does not retain data
    (that is, has a DataRetentionInHours of 0).
  * api-change:``sagemaker``: Amazon SageMaker Studio now supports Docker
    access from within app container
- From 1.32.9
  * api-change:``emr``: Update emr command to latest version
- From 1.32.8
  * api-change:``iam``: Documentation updates for AWS Identity and Access
    Management (IAM).
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
- From 1.32.7
  * api-change:``bedrock-agent``: Adding Claude 2.1 support to Bedrock Agents
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
  * api-change:``glue``: This release adds additional configurations for Query
    Session Context on the following APIs: GetUnfilteredTableMetadata,
    GetUnfilteredPartitionMetadata, GetUnfilteredPartitionsMetadata.
  * api-change:``lakeformation``: This release adds additional configurations
    on GetTemporaryGlueTableCredentials for Query Session Context.
  * api-change:``mediaconnect``: This release adds the DescribeSourceMetadata
    API. This API can be used to view the stream information of the flow's
    source.
  * api-change:``networkmonitor``: CloudWatch Network Monitor is a new service
    within CloudWatch that will help network administrators and operators
    continuously monitor network performance metrics such as round-trip-time
    and packet loss between their AWS-hosted applications and their on-premises
    locations.
  * api-change:``omics``: Provides minor corrections and an updated description
    of APIs.
  * api-change:``secretsmanager``: Update endpoint rules and examples.
- From 1.32.6
  * api-change:``amp``: This release updates Amazon Managed Service for
    Prometheus APIs to support customer managed KMS keys.
  * api-change:``appintegrations``: The Amazon AppIntegrations service adds
    DeleteApplication API for deleting applications, and updates APIs to
    support third party applications reacting to workspace events and make
    data requests to Amazon Connect for agent and contact events.
  * api-change:``bedrock-agent``: This release introduces Amazon Aurora as a
    vector store on Knowledge Bases for Amazon Bedrock
  * api-change:``codecommit``: AWS CodeCommit now supports customer managed
    keys from AWS Key Management Service. UpdateRepositoryEncryptionKey is
    added for updating the key configuration. CreateRepository, GetRepository,
    BatchGetRepositories are updated with new input or output parameters.
  * api-change:``connect``: Adds APIs to manage User Proficiencies and
    Predefined Attributes. Enhances StartOutboundVoiceContact API input.
    Introduces SearchContacts API. Enhances DescribeContact API. Adds an API to
    update Routing Attributes in QueuePriority and QueueTimeAdjustmentSeconds.
  * api-change:``medialive``: MediaLive now supports the ability to configure
    the audio that an AWS Elemental Link UHD device produces, when the device
    is configured as the source for a flow in AWS Elemental MediaConnect.
  * api-change:``neptune-graph``: Adds Waiters for successful creation and
    deletion of Graph, Graph Snapshot, Import Task and Private Endpoints for
    Neptune Analytics
  * api-change:``rds-data``: This release adds support for using RDS Data API
    with Aurora PostgreSQL Serverless v2 and provisioned DB clusters.
  * api-change:``rds``: This release adds support for using RDS Data API with
    Aurora PostgreSQL Serverless v2 and provisioned DB clusters.
  * api-change:``sagemaker``: Amazon SageMaker Training now provides model
    training container access for debugging purposes. Amazon SageMaker Search
    now provides the ability to use visibility conditions to limit resource
    access to a single domain or multiple domains.
- From 1.32.5
  * api-change:``appstream``: This release introduces configurable clipboard,
    allowing admins to specify the maximum length of text that can be copied by
    the users from their device to the remote session and vice-versa.
  * api-change:``eks``: Add support for cluster insights, new EKS capability
    that surfaces potentially upgrade impacting issues.
  * api-change:``guardduty``: This release 1) introduces a new API:
    GetOrganizationStatistics , and 2) adds a new UsageStatisticType
    TOP_ACCOUNTS_BY_FEATURE for GetUsageStatistics API
  * api-change:``managedblockchain-query``: Adding Confirmation Status and
    Execution Status to GetTransaction Response.
  * api-change:``mediatailor``: Adds the ability to configure time shifting on
    MediaTailor channels using the TimeShiftConfiguration field
  * api-change:``route53``: Amazon Route 53 now supports the Canada West
    (Calgary) Region (ca-west-1) for latency records, geoproximity records,
    and private DNS for Amazon VPCs in that region.
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
- From 1.32.4
  * api-change:``appsync``: This release adds additional configurations on
    GraphQL APIs for limits on query depth, resolver count, and introspection
  * api-change:``chime-sdk-meetings``: Add meeting features to specify a
    maximum camera resolution, a maximum content sharing resolution, and a
    maximum number of attendees for a given meeting.
  * api-change:``ec2``: Provision BYOIPv4 address ranges and advertise them by
    specifying the network border groups option in Los Angeles, Phoenix and
    Dallas AWS Local Zones.
  * api-change:``fsx``: Added support for FSx for OpenZFS on-demand data
    replication across AWS accounts and/or regions.Added the IncludeShared
    attribute for DescribeSnapshots.Added the CopyStrategy attribute for
    OpenZFSVolumeConfiguration.
  * api-change:``marketplace-catalog``: AWS Marketplace now supports a new API,
    BatchDescribeEntities, which returns metadata and content for multiple
    entities.
  * api-change:``rds``: RDS - The release adds two new APIs:
    DescribeDBRecommendations and ModifyDBRecommendation
- From 1.32.3
  * api-change:``cognito-idp``: Amazon Cognito now supports trigger versions
    that define the fields in the request sent to pre token generation Lambda
    triggers.
  * api-change:``eks``: Add support for EKS Cluster Access Management.
  * api-change:``quicksight``: A docs-only release to add missing entities to
    the API reference.
  * api-change:``route53resolver``: Add DOH protocols in resolver endpoints.
- From 1.32.2
  * enhancement:``cloudformation package``: Add support for intrinsic
    Fn:ForEach (fixes `#8075 &lt;https://github.com/aws/aws-cli/issues/8075&gt;`__)
  * api-change:``cloud9``: Updated Cloud9 API documentation for AL2023 release
  * api-change:``connect``: Adds relatedContactId field to
    StartOutboundVoiceContact API input. Introduces PauseContact API and
    ResumeContact API for Task contacts. Adds pause duration, number of pauses,
    timestamps for last paused and resumed events to DescribeContact API
    response. Adds new Rule type and new Rule action.
  * api-change:``connectcases``: Increase number of fields that can be included
    in CaseEventIncludedData from 50 to 200
  * api-change:``kms``: Documentation updates for AWS Key Management Service
  * api-change:``rds``: Updates Amazon RDS documentation by adding code examples
  * api-change:``sagemaker``: This release 1) introduces a new API:
    DeleteCompilationJob , and 2) adds InfraCheckConfig for Create/Describe
    training job API
- From 1.32.1
  * api-change:``appstream``: This release includes support for images of
    Windows Server 2022 platform.
  * api-change:``b2bi``: Documentation updates for AWS B2B Data Interchange
  * api-change:``billingconductor``: Billing Conductor is releasing a new API,
    GetBillingGroupCostReport, which provides the ability to retrieve/view the
    Billing Group Cost Report broken down by attributes for a specific billing
    group.
  * api-change:``connect``: This release adds support for more granular
    billing using tags (key:value pairs)
  * api-change:``controltower``: Documentation updates for AWS Control Tower.
  * api-change:``firehose``: This release, 1) adds configurable buffering hints
    for the Splunk destination, and 2) reduces the minimum configurable
    buffering interval for supported destinations
  * api-change:``gamelift``: Amazon GameLift adds the ability to add and update
    the game properties of active game sessions.
  * api-change:``iot``: This release adds the ability to self-manage
    certificate signing in AWS IoT Core fleet provisioning using the new
    certificate provider resource.
  * api-change:``neptune-graph``: This is the initial SDK release for Amazon
    Neptune Analytics
  * api-change:``opensearch``: Updating documentation for Amazon OpenSearch
    Service support for new zero-ETL integration with Amazon S3.
  * api-change:``quicksight``: Update Dashboard Links support;
    SingleAxisOptions support; Scatterplot Query limit support.
  * api-change:``workspaces``: Updated note to ensure customers understand
    running modes.
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version
- From 1.32.0
  * feature:Python: End of support for Python 3.7
  * api-change:``drs``: Adding AgentVersion to SourceServer and
    RecoveryInstance structures
  * feature:Python: End of support for Python 3.7
- From 1.31.13
  * api-change:``imagebuilder``: This release adds the Image Workflows feature
    to give more flexibility and control over the image building and testing
    process.
  * api-change:``location``: This release 1)  adds sub-municipality field in
    Places API for searching and getting places information, and 2) allows
    optimizing route calculation based on expected arrival time.
  * api-change:``logs``: This release introduces the StartLiveTail API to tail
    ingested logs in near real time.
- From 1.31.12
  * api-change:``neptune``: This release adds a new parameter configuration
    setting to the Neptune cluster related APIs that can be leveraged to
    switch between the underlying supported storage modes.
  * api-change:``pinpoint``: This release includes Amazon Pinpoint API
    documentation updates pertaining to campaign message sending rate limits.
  * api-change:``securityhub``: Added new resource detail objects to ASFF,
    including resources for AwsDynamoDbTable, AwsEc2ClientVpnEndpoint,
    AwsMskCluster, AwsS3AccessPoint, AwsS3Bucket
  * api-change:``endpoint-rules``: Update endpoint-rules command to latest
    version</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="rjschwei@suse.com" date="1710331200">- Reconfigure the spec file support builds better in Factory and SLE
  supporting different Python interpreter versions</changelog>
</package>
<package pkgid="a4dcc3b3d0ccf84f536848f87dcf1cc944c5a5cb45776b474f7120a1d9213f6f" name="aws-nitro-enclaves-binaryblobs-upstream" arch="aarch64">
  <version epoch="0" ver="1.3.0~git1.db34c02" rel="150600.10.3.1"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
</package>
<package pkgid="7cfc2ebc5d95a7e714920729aae6acf830f418d19c745507b7c2198f47992734" name="aws-nitro-enclaves-binaryblobs-upstream" arch="x86_64">
  <version epoch="0" ver="1.3.0~git1.db34c02" rel="150600.10.3.1"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
</package>
<package pkgid="854ecd3e41c450a97aeafe1bd9d17365a711efd9603b0a17de97a81574ed13cd" name="aws-nitro-enclaves-cli" arch="aarch64">
  <version epoch="0" ver="1.3.0~git1.db34c02" rel="150600.10.3.1"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
</package>
<package pkgid="7d324ee70ea4fb2ef8993fd408403734b4de995d8a2acd76a496092256daa63c" name="aws-nitro-enclaves-cli" arch="src">
  <version epoch="0" ver="1.3.0~git1.db34c02" rel="150600.10.3.1"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
</package>
<package pkgid="e643f5644ab298513732c28bad6f7099eb30df2e91fc68238ef24de43e3027b4" name="aws-nitro-enclaves-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~git1.db34c02" rel="150600.10.3.1"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
</package>
<package pkgid="285b7971012b9a71fd74da8c6daf80eb1029f6e1d31d9417c31b1cb9b0d27172" name="bcc" arch="src">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="35376adf7d3c3c6f399b81223996cf83722908c8a180cd4e331685c276602963" name="bcc-devel" arch="aarch64">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="201112de433198c4c56c97e3cb551677452b89844c665668b3b26a0acdb8e95f" name="bcc-devel" arch="ppc64le">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="c891f341dfefda774d0f29933a569e995b9d6fe63d0d05445b4855ccc882baae" name="bcc-devel" arch="s390x">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="d43310472a7b1d6d789256f0d7db827d8950e64a4b30e68e171a28b40fa97154" name="bcc-devel" arch="x86_64">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="416da9d3331f1bce3fe17a23f760968ff39fd51246f4e8ec8445ff2fefc8d6e4" name="bcc-docs" arch="noarch">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="5653f8b348015b3882dade8f4674b9d9a9718ee1375e103d5bf18c3131e34488" name="bcc-examples" arch="noarch">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="1ce2ff96d7b1fa4149de45239dbcefceb893ab97a6695d10e6407fdc9226de2f" name="bcc-tools" arch="aarch64">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="ba0d570de8c80ada527a16b23a9bc55c3183de46c84547d846f332234767dddb" name="bcc-tools" arch="ppc64le">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="1e0b8ee257a6d55c9154a54b2ff7d7df07f0539cd10e8d49862082b548656a66" name="bcc-tools" arch="s390x">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="b7ad8c15f51d31427d3f1f9b0c81663f9b155d9c7b71eabbe35cb85b9a7d0e4c" name="bcc-tools" arch="x86_64">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="cb3ac58c75439eff9c032c24013720d9681fba7c231b47db8818519bb455a7bf" name="booth" arch="aarch64">
  <version epoch="0" ver="1.1+git0.09b0074" rel="150600.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- Update to version 1.0+20220724.dce51f9:
  * ticket: Fix compiler warning
  * rpm: use new package name for pacemaker devel on opensuse
  * Revert "Refactor: main: substitute is_auth_req macro"
  * doc: Describe debug config file option
  * handler: Use only signal-safe functions
  * main: Use only signal-safe functions
  * fix bashisms (use printf instead of echo)
- fixes CVE-2022-2553 [bsc#1201946]</changelog>
  <changelog author="ygao@suse.com" date="1663070400">- Update to version 1.0+20220815.f40c2d5:
  * configure: Modernize configure.ac a bit
- spec: BuildRequires firewall-macros (bsc#1202959)
- spec: optionally BuildRequires cluster-glue-devel instead of libglue-devel</changelog>
  <changelog author="varkoly@suse.com" date="1678968000">- Update to version 1.0+20221117.9d4029a:
  * man: Add generated html files into gitignore
  * man: remove literal paragraph format from boothd.8
  * man: Remove italic bold formatting
  * man: Do not format __defaults__
  * man: Indent peers counters
  * man: Move debug description to better place
  * test: Add test for unknown/unexpected keyword
  * config: Include protocol in error message
  * config: Include keyword in error message
  * unit file: Remove Alias directive</changelog>
  <changelog author="varkoly@suse.com" date="1699963200">- Update to version 1.1+git0.09b0074:
  * build: Prepare version 1.1 release
  * build: Make distcheck work for non-root user
  * build: Include icons in release tarballs
  * build: Add release.mk
  * build: Add gitlog-to-changelog
  * tests: Fix Python 3.12 warning
  * attr: Fix glib hash_table != NULL assert
  * attr: Fix memory leak for list and get operation
  * main: Fix exit code on grant/revoke command error
  * spec: Migrate to SPDX license
- Added hardening to systemd service(s). Added patch(es):
  * harden_booth-arbitrator.service.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-3049 [bsc#1226032], specially crafted hash can lead to invalid HMAC being accepted by Booth server
  + booth-CVE-2024-3049.patch</changelog>
</package>
<package pkgid="83c14aa964baff6155eb47a4282bc37d6ed3f6208572fbc33f1130821e201cbf" name="booth" arch="ppc64le">
  <version epoch="0" ver="1.1+git0.09b0074" rel="150600.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- Update to version 1.0+20220724.dce51f9:
  * ticket: Fix compiler warning
  * rpm: use new package name for pacemaker devel on opensuse
  * Revert "Refactor: main: substitute is_auth_req macro"
  * doc: Describe debug config file option
  * handler: Use only signal-safe functions
  * main: Use only signal-safe functions
  * fix bashisms (use printf instead of echo)
- fixes CVE-2022-2553 [bsc#1201946]</changelog>
  <changelog author="ygao@suse.com" date="1663070400">- Update to version 1.0+20220815.f40c2d5:
  * configure: Modernize configure.ac a bit
- spec: BuildRequires firewall-macros (bsc#1202959)
- spec: optionally BuildRequires cluster-glue-devel instead of libglue-devel</changelog>
  <changelog author="varkoly@suse.com" date="1678968000">- Update to version 1.0+20221117.9d4029a:
  * man: Add generated html files into gitignore
  * man: remove literal paragraph format from boothd.8
  * man: Remove italic bold formatting
  * man: Do not format __defaults__
  * man: Indent peers counters
  * man: Move debug description to better place
  * test: Add test for unknown/unexpected keyword
  * config: Include protocol in error message
  * config: Include keyword in error message
  * unit file: Remove Alias directive</changelog>
  <changelog author="varkoly@suse.com" date="1699963200">- Update to version 1.1+git0.09b0074:
  * build: Prepare version 1.1 release
  * build: Make distcheck work for non-root user
  * build: Include icons in release tarballs
  * build: Add release.mk
  * build: Add gitlog-to-changelog
  * tests: Fix Python 3.12 warning
  * attr: Fix glib hash_table != NULL assert
  * attr: Fix memory leak for list and get operation
  * main: Fix exit code on grant/revoke command error
  * spec: Migrate to SPDX license
- Added hardening to systemd service(s). Added patch(es):
  * harden_booth-arbitrator.service.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-3049 [bsc#1226032], specially crafted hash can lead to invalid HMAC being accepted by Booth server
  + booth-CVE-2024-3049.patch</changelog>
</package>
<package pkgid="60a39fc6cf8ce9ec5ae11a70563c4922af4c084cd0775857c8dbec84f297ccd3" name="booth" arch="s390x">
  <version epoch="0" ver="1.1+git0.09b0074" rel="150600.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- Update to version 1.0+20220724.dce51f9:
  * ticket: Fix compiler warning
  * rpm: use new package name for pacemaker devel on opensuse
  * Revert "Refactor: main: substitute is_auth_req macro"
  * doc: Describe debug config file option
  * handler: Use only signal-safe functions
  * main: Use only signal-safe functions
  * fix bashisms (use printf instead of echo)
- fixes CVE-2022-2553 [bsc#1201946]</changelog>
  <changelog author="ygao@suse.com" date="1663070400">- Update to version 1.0+20220815.f40c2d5:
  * configure: Modernize configure.ac a bit
- spec: BuildRequires firewall-macros (bsc#1202959)
- spec: optionally BuildRequires cluster-glue-devel instead of libglue-devel</changelog>
  <changelog author="varkoly@suse.com" date="1678968000">- Update to version 1.0+20221117.9d4029a:
  * man: Add generated html files into gitignore
  * man: remove literal paragraph format from boothd.8
  * man: Remove italic bold formatting
  * man: Do not format __defaults__
  * man: Indent peers counters
  * man: Move debug description to better place
  * test: Add test for unknown/unexpected keyword
  * config: Include protocol in error message
  * config: Include keyword in error message
  * unit file: Remove Alias directive</changelog>
  <changelog author="varkoly@suse.com" date="1699963200">- Update to version 1.1+git0.09b0074:
  * build: Prepare version 1.1 release
  * build: Make distcheck work for non-root user
  * build: Include icons in release tarballs
  * build: Add release.mk
  * build: Add gitlog-to-changelog
  * tests: Fix Python 3.12 warning
  * attr: Fix glib hash_table != NULL assert
  * attr: Fix memory leak for list and get operation
  * main: Fix exit code on grant/revoke command error
  * spec: Migrate to SPDX license
- Added hardening to systemd service(s). Added patch(es):
  * harden_booth-arbitrator.service.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-3049 [bsc#1226032], specially crafted hash can lead to invalid HMAC being accepted by Booth server
  + booth-CVE-2024-3049.patch</changelog>
</package>
<package pkgid="00f84af362c159c9ff62cb43de23608f414a2a0e49b68e8849cbbab965e33837" name="booth" arch="src">
  <version epoch="0" ver="1.1+git0.09b0074" rel="150600.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- Update to version 1.0+20220724.dce51f9:
  * ticket: Fix compiler warning
  * rpm: use new package name for pacemaker devel on opensuse
  * Revert "Refactor: main: substitute is_auth_req macro"
  * doc: Describe debug config file option
  * handler: Use only signal-safe functions
  * main: Use only signal-safe functions
  * fix bashisms (use printf instead of echo)
- fixes CVE-2022-2553 [bsc#1201946]</changelog>
  <changelog author="ygao@suse.com" date="1663070400">- Update to version 1.0+20220815.f40c2d5:
  * configure: Modernize configure.ac a bit
- spec: BuildRequires firewall-macros (bsc#1202959)
- spec: optionally BuildRequires cluster-glue-devel instead of libglue-devel</changelog>
  <changelog author="varkoly@suse.com" date="1678968000">- Update to version 1.0+20221117.9d4029a:
  * man: Add generated html files into gitignore
  * man: remove literal paragraph format from boothd.8
  * man: Remove italic bold formatting
  * man: Do not format __defaults__
  * man: Indent peers counters
  * man: Move debug description to better place
  * test: Add test for unknown/unexpected keyword
  * config: Include protocol in error message
  * config: Include keyword in error message
  * unit file: Remove Alias directive</changelog>
  <changelog author="varkoly@suse.com" date="1699963200">- Update to version 1.1+git0.09b0074:
  * build: Prepare version 1.1 release
  * build: Make distcheck work for non-root user
  * build: Include icons in release tarballs
  * build: Add release.mk
  * build: Add gitlog-to-changelog
  * tests: Fix Python 3.12 warning
  * attr: Fix glib hash_table != NULL assert
  * attr: Fix memory leak for list and get operation
  * main: Fix exit code on grant/revoke command error
  * spec: Migrate to SPDX license
- Added hardening to systemd service(s). Added patch(es):
  * harden_booth-arbitrator.service.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-3049 [bsc#1226032], specially crafted hash can lead to invalid HMAC being accepted by Booth server
  + booth-CVE-2024-3049.patch</changelog>
</package>
<package pkgid="067fd53c6c051d57e0ae17fa72d1ddd27ff2f6456ca4036007219928460ed6e1" name="booth" arch="x86_64">
  <version epoch="0" ver="1.1+git0.09b0074" rel="150600.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- Update to version 1.0+20220724.dce51f9:
  * ticket: Fix compiler warning
  * rpm: use new package name for pacemaker devel on opensuse
  * Revert "Refactor: main: substitute is_auth_req macro"
  * doc: Describe debug config file option
  * handler: Use only signal-safe functions
  * main: Use only signal-safe functions
  * fix bashisms (use printf instead of echo)
- fixes CVE-2022-2553 [bsc#1201946]</changelog>
  <changelog author="ygao@suse.com" date="1663070400">- Update to version 1.0+20220815.f40c2d5:
  * configure: Modernize configure.ac a bit
- spec: BuildRequires firewall-macros (bsc#1202959)
- spec: optionally BuildRequires cluster-glue-devel instead of libglue-devel</changelog>
  <changelog author="varkoly@suse.com" date="1678968000">- Update to version 1.0+20221117.9d4029a:
  * man: Add generated html files into gitignore
  * man: remove literal paragraph format from boothd.8
  * man: Remove italic bold formatting
  * man: Do not format __defaults__
  * man: Indent peers counters
  * man: Move debug description to better place
  * test: Add test for unknown/unexpected keyword
  * config: Include protocol in error message
  * config: Include keyword in error message
  * unit file: Remove Alias directive</changelog>
  <changelog author="varkoly@suse.com" date="1699963200">- Update to version 1.1+git0.09b0074:
  * build: Prepare version 1.1 release
  * build: Make distcheck work for non-root user
  * build: Include icons in release tarballs
  * build: Add release.mk
  * build: Add gitlog-to-changelog
  * tests: Fix Python 3.12 warning
  * attr: Fix glib hash_table != NULL assert
  * attr: Fix memory leak for list and get operation
  * main: Fix exit code on grant/revoke command error
  * spec: Migrate to SPDX license
- Added hardening to systemd service(s). Added patch(es):
  * harden_booth-arbitrator.service.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-3049 [bsc#1226032], specially crafted hash can lead to invalid HMAC being accepted by Booth server
  + booth-CVE-2024-3049.patch</changelog>
</package>
<package pkgid="6531ce9fae07a394dc30fb64529b1c0bd5de6c49a5b497735e4eba40c3a1a523" name="booth-test" arch="aarch64">
  <version epoch="0" ver="1.1+git0.09b0074" rel="150600.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- Update to version 1.0+20220724.dce51f9:
  * ticket: Fix compiler warning
  * rpm: use new package name for pacemaker devel on opensuse
  * Revert "Refactor: main: substitute is_auth_req macro"
  * doc: Describe debug config file option
  * handler: Use only signal-safe functions
  * main: Use only signal-safe functions
  * fix bashisms (use printf instead of echo)
- fixes CVE-2022-2553 [bsc#1201946]</changelog>
  <changelog author="ygao@suse.com" date="1663070400">- Update to version 1.0+20220815.f40c2d5:
  * configure: Modernize configure.ac a bit
- spec: BuildRequires firewall-macros (bsc#1202959)
- spec: optionally BuildRequires cluster-glue-devel instead of libglue-devel</changelog>
  <changelog author="varkoly@suse.com" date="1678968000">- Update to version 1.0+20221117.9d4029a:
  * man: Add generated html files into gitignore
  * man: remove literal paragraph format from boothd.8
  * man: Remove italic bold formatting
  * man: Do not format __defaults__
  * man: Indent peers counters
  * man: Move debug description to better place
  * test: Add test for unknown/unexpected keyword
  * config: Include protocol in error message
  * config: Include keyword in error message
  * unit file: Remove Alias directive</changelog>
  <changelog author="varkoly@suse.com" date="1699963200">- Update to version 1.1+git0.09b0074:
  * build: Prepare version 1.1 release
  * build: Make distcheck work for non-root user
  * build: Include icons in release tarballs
  * build: Add release.mk
  * build: Add gitlog-to-changelog
  * tests: Fix Python 3.12 warning
  * attr: Fix glib hash_table != NULL assert
  * attr: Fix memory leak for list and get operation
  * main: Fix exit code on grant/revoke command error
  * spec: Migrate to SPDX license
- Added hardening to systemd service(s). Added patch(es):
  * harden_booth-arbitrator.service.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-3049 [bsc#1226032], specially crafted hash can lead to invalid HMAC being accepted by Booth server
  + booth-CVE-2024-3049.patch</changelog>
</package>
<package pkgid="5f0f2de9e454d6b462e5bc9d55b5f78bf084f4712ac7bae1d92a73764c188ad8" name="booth-test" arch="ppc64le">
  <version epoch="0" ver="1.1+git0.09b0074" rel="150600.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- Update to version 1.0+20220724.dce51f9:
  * ticket: Fix compiler warning
  * rpm: use new package name for pacemaker devel on opensuse
  * Revert "Refactor: main: substitute is_auth_req macro"
  * doc: Describe debug config file option
  * handler: Use only signal-safe functions
  * main: Use only signal-safe functions
  * fix bashisms (use printf instead of echo)
- fixes CVE-2022-2553 [bsc#1201946]</changelog>
  <changelog author="ygao@suse.com" date="1663070400">- Update to version 1.0+20220815.f40c2d5:
  * configure: Modernize configure.ac a bit
- spec: BuildRequires firewall-macros (bsc#1202959)
- spec: optionally BuildRequires cluster-glue-devel instead of libglue-devel</changelog>
  <changelog author="varkoly@suse.com" date="1678968000">- Update to version 1.0+20221117.9d4029a:
  * man: Add generated html files into gitignore
  * man: remove literal paragraph format from boothd.8
  * man: Remove italic bold formatting
  * man: Do not format __defaults__
  * man: Indent peers counters
  * man: Move debug description to better place
  * test: Add test for unknown/unexpected keyword
  * config: Include protocol in error message
  * config: Include keyword in error message
  * unit file: Remove Alias directive</changelog>
  <changelog author="varkoly@suse.com" date="1699963200">- Update to version 1.1+git0.09b0074:
  * build: Prepare version 1.1 release
  * build: Make distcheck work for non-root user
  * build: Include icons in release tarballs
  * build: Add release.mk
  * build: Add gitlog-to-changelog
  * tests: Fix Python 3.12 warning
  * attr: Fix glib hash_table != NULL assert
  * attr: Fix memory leak for list and get operation
  * main: Fix exit code on grant/revoke command error
  * spec: Migrate to SPDX license
- Added hardening to systemd service(s). Added patch(es):
  * harden_booth-arbitrator.service.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-3049 [bsc#1226032], specially crafted hash can lead to invalid HMAC being accepted by Booth server
  + booth-CVE-2024-3049.patch</changelog>
</package>
<package pkgid="0d4268f9fdf245aa195414c67d07d6b001e63daf897a4c034106f7c855fd3862" name="booth-test" arch="s390x">
  <version epoch="0" ver="1.1+git0.09b0074" rel="150600.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- Update to version 1.0+20220724.dce51f9:
  * ticket: Fix compiler warning
  * rpm: use new package name for pacemaker devel on opensuse
  * Revert "Refactor: main: substitute is_auth_req macro"
  * doc: Describe debug config file option
  * handler: Use only signal-safe functions
  * main: Use only signal-safe functions
  * fix bashisms (use printf instead of echo)
- fixes CVE-2022-2553 [bsc#1201946]</changelog>
  <changelog author="ygao@suse.com" date="1663070400">- Update to version 1.0+20220815.f40c2d5:
  * configure: Modernize configure.ac a bit
- spec: BuildRequires firewall-macros (bsc#1202959)
- spec: optionally BuildRequires cluster-glue-devel instead of libglue-devel</changelog>
  <changelog author="varkoly@suse.com" date="1678968000">- Update to version 1.0+20221117.9d4029a:
  * man: Add generated html files into gitignore
  * man: remove literal paragraph format from boothd.8
  * man: Remove italic bold formatting
  * man: Do not format __defaults__
  * man: Indent peers counters
  * man: Move debug description to better place
  * test: Add test for unknown/unexpected keyword
  * config: Include protocol in error message
  * config: Include keyword in error message
  * unit file: Remove Alias directive</changelog>
  <changelog author="varkoly@suse.com" date="1699963200">- Update to version 1.1+git0.09b0074:
  * build: Prepare version 1.1 release
  * build: Make distcheck work for non-root user
  * build: Include icons in release tarballs
  * build: Add release.mk
  * build: Add gitlog-to-changelog
  * tests: Fix Python 3.12 warning
  * attr: Fix glib hash_table != NULL assert
  * attr: Fix memory leak for list and get operation
  * main: Fix exit code on grant/revoke command error
  * spec: Migrate to SPDX license
- Added hardening to systemd service(s). Added patch(es):
  * harden_booth-arbitrator.service.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-3049 [bsc#1226032], specially crafted hash can lead to invalid HMAC being accepted by Booth server
  + booth-CVE-2024-3049.patch</changelog>
</package>
<package pkgid="df975a7ba76ba3351a19b1f3d3464426a5ae1968ada2d2aace6900fb56c4ced0" name="booth-test" arch="x86_64">
  <version epoch="0" ver="1.1+git0.09b0074" rel="150600.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- Update to version 1.0+20220724.dce51f9:
  * ticket: Fix compiler warning
  * rpm: use new package name for pacemaker devel on opensuse
  * Revert "Refactor: main: substitute is_auth_req macro"
  * doc: Describe debug config file option
  * handler: Use only signal-safe functions
  * main: Use only signal-safe functions
  * fix bashisms (use printf instead of echo)
- fixes CVE-2022-2553 [bsc#1201946]</changelog>
  <changelog author="ygao@suse.com" date="1663070400">- Update to version 1.0+20220815.f40c2d5:
  * configure: Modernize configure.ac a bit
- spec: BuildRequires firewall-macros (bsc#1202959)
- spec: optionally BuildRequires cluster-glue-devel instead of libglue-devel</changelog>
  <changelog author="varkoly@suse.com" date="1678968000">- Update to version 1.0+20221117.9d4029a:
  * man: Add generated html files into gitignore
  * man: remove literal paragraph format from boothd.8
  * man: Remove italic bold formatting
  * man: Do not format __defaults__
  * man: Indent peers counters
  * man: Move debug description to better place
  * test: Add test for unknown/unexpected keyword
  * config: Include protocol in error message
  * config: Include keyword in error message
  * unit file: Remove Alias directive</changelog>
  <changelog author="varkoly@suse.com" date="1699963200">- Update to version 1.1+git0.09b0074:
  * build: Prepare version 1.1 release
  * build: Make distcheck work for non-root user
  * build: Include icons in release tarballs
  * build: Add release.mk
  * build: Add gitlog-to-changelog
  * tests: Fix Python 3.12 warning
  * attr: Fix glib hash_table != NULL assert
  * attr: Fix memory leak for list and get operation
  * main: Fix exit code on grant/revoke command error
  * spec: Migrate to SPDX license
- Added hardening to systemd service(s). Added patch(es):
  * harden_booth-arbitrator.service.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718107200">- security update
- added patches
  fix CVE-2024-3049 [bsc#1226032], specially crafted hash can lead to invalid HMAC being accepted by Booth server
  + booth-CVE-2024-3049.patch</changelog>
</package>
<package pkgid="06494b09810c5ea49a713ef8670bb2149ba573be342c7ee3fda98df84e71227f" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.78.1" rel="150200.3.29.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
</package>
<package pkgid="d8d44c522264af035e7bc9668ff97e4b51d8e6c03e81886fd9d59c6a56b8e610" name="bouncycastle" arch="src">
  <version epoch="0" ver="1.78.1" rel="150200.3.29.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
</package>
<package pkgid="f10c2c33174e8abadb9c558905010413123a647ab2f059e2245fb701c74347cc" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.78.1" rel="150200.3.29.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
</package>
<package pkgid="7bf041e3e9b2eea43aaa94160781b974a331c9446285311cc138d694fd4c0e94" name="bouncycastle-jmail" arch="noarch">
  <version epoch="0" ver="1.78.1" rel="150200.3.29.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
</package>
<package pkgid="69c22953cc92d32ae9e462a50d444d1cfbbe41610663d9b3bfbad0dbf133e1c9" name="bouncycastle-mail" arch="noarch">
  <version epoch="0" ver="1.78.1" rel="150200.3.29.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
</package>
<package pkgid="022af6e723dea1adc758454d0d9f2f6892602c0b7b725acaadbf4e6b8a80f574" name="bouncycastle-pg" arch="noarch">
  <version epoch="0" ver="1.78.1" rel="150200.3.29.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
</package>
<package pkgid="5697e56ba427e320c8133d05c41027af5eda6c545fc88105774650e5772aef73" name="bouncycastle-pkix" arch="noarch">
  <version epoch="0" ver="1.78.1" rel="150200.3.29.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
</package>
<package pkgid="64e34b14cc01f32e4edd4198ccd5dafcc40ff61f622523a2ac85005ae95b85d2" name="bouncycastle-tls" arch="noarch">
  <version epoch="0" ver="1.78.1" rel="150200.3.29.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
</package>
<package pkgid="c60762827fd44ce3a079a5da31f70890ba1f3670c3549add2e7dfbb669895679" name="bouncycastle-util" arch="noarch">
  <version epoch="0" ver="1.78.1" rel="150200.3.29.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
</package>
<package pkgid="dcf0a94d3e6b2fbf11ae2cfc588545d19c12bbb56f11a3ea3af1ed669bb91c5b" name="bpftool" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150600.19.3.3"/>
  <changelog author="mrostecki@opensuse.org" date="1557403200">- Initial release</changelog>
  <changelog author="lnussel@suse.de" date="1578484800">- use optflags for building
- build and install man pages</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1683115200">- Add dwarves as build dependency as pahole is called during build
- Fix BTF-to-C converter's padding logic (jsc#PED-3924)
  New patch: libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1693569600">- Update bpftool align with v5.19-based kernel
  + Implement BTFGen (i.e gen min_core_btf command)
  + Support for new btf kind BTF_KIND_DECL_TAG and BTF_KIND_TYPE_TAG
  + Support multiple .rodata/.data internal maps in skeleton
  + Probes for bounded loops, instruction set extensions, and offload-enabled
  + Generate Light skeleton for the kernel
  + Enable libbpf's strict mode by default
  + Show program &amp; link type names
  + Support showing program names declared in BTF
  + Add BPF_TRACE_KPROBE_MULTI to attach type names table
  + Check unprivileged_bpf_disabled against value of 2
  + Use sysfs vmlinux when dumping BTF by ID
- Drop libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch as the fix is now
  included</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697803200">- Update bpftool align with v6.4-based kernel
  + Support for KIND_RESTRICT in gen min_core_btf command
  + Support BPF_MAP_TYPE_USER_RINGBUF map type
  + Support new cgroup local storage
  + Support printing opcodes and source file references in CFG
  + Probe for memcg-based accounting and bump rlimit only if needed
  + Allow toggling autoattach for bpf prog load|loadall
  + Remove support of --legacy option for bpftool
  + Remove BPF_OBJ_NAME_LEN restriction when looking up bpf program by name</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1705924800">- Update bpftool to align with v6.5-based kernel
  * show map IDs along with struct_ops links
  * show map IDs instead of raw value for map_of_maps types
  * show target_{obj,btf}_id in tracing link info</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Enable showing info for processes holding BPF map/prog/link/btf FDs
  (jsc#PED-8375)</changelog>
</package>
<package pkgid="d07d3641f9832715cf93a9cc898fa22556a1761804e80dc94ca4fe51c457a977" name="bpftool" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150600.19.3.3"/>
  <changelog author="mrostecki@opensuse.org" date="1557403200">- Initial release</changelog>
  <changelog author="lnussel@suse.de" date="1578484800">- use optflags for building
- build and install man pages</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1683115200">- Add dwarves as build dependency as pahole is called during build
- Fix BTF-to-C converter's padding logic (jsc#PED-3924)
  New patch: libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1693569600">- Update bpftool align with v5.19-based kernel
  + Implement BTFGen (i.e gen min_core_btf command)
  + Support for new btf kind BTF_KIND_DECL_TAG and BTF_KIND_TYPE_TAG
  + Support multiple .rodata/.data internal maps in skeleton
  + Probes for bounded loops, instruction set extensions, and offload-enabled
  + Generate Light skeleton for the kernel
  + Enable libbpf's strict mode by default
  + Show program &amp; link type names
  + Support showing program names declared in BTF
  + Add BPF_TRACE_KPROBE_MULTI to attach type names table
  + Check unprivileged_bpf_disabled against value of 2
  + Use sysfs vmlinux when dumping BTF by ID
- Drop libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch as the fix is now
  included</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697803200">- Update bpftool align with v6.4-based kernel
  + Support for KIND_RESTRICT in gen min_core_btf command
  + Support BPF_MAP_TYPE_USER_RINGBUF map type
  + Support new cgroup local storage
  + Support printing opcodes and source file references in CFG
  + Probe for memcg-based accounting and bump rlimit only if needed
  + Allow toggling autoattach for bpf prog load|loadall
  + Remove support of --legacy option for bpftool
  + Remove BPF_OBJ_NAME_LEN restriction when looking up bpf program by name</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1705924800">- Update bpftool to align with v6.5-based kernel
  * show map IDs along with struct_ops links
  * show map IDs instead of raw value for map_of_maps types
  * show target_{obj,btf}_id in tracing link info</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Enable showing info for processes holding BPF map/prog/link/btf FDs
  (jsc#PED-8375)</changelog>
</package>
<package pkgid="7ccb46bad37466e1d69178a78a300512a743416974650fefd875fd5b1cf80e39" name="bpftool" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150600.19.3.3"/>
  <changelog author="mrostecki@opensuse.org" date="1557403200">- Initial release</changelog>
  <changelog author="lnussel@suse.de" date="1578484800">- use optflags for building
- build and install man pages</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1683115200">- Add dwarves as build dependency as pahole is called during build
- Fix BTF-to-C converter's padding logic (jsc#PED-3924)
  New patch: libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1693569600">- Update bpftool align with v5.19-based kernel
  + Implement BTFGen (i.e gen min_core_btf command)
  + Support for new btf kind BTF_KIND_DECL_TAG and BTF_KIND_TYPE_TAG
  + Support multiple .rodata/.data internal maps in skeleton
  + Probes for bounded loops, instruction set extensions, and offload-enabled
  + Generate Light skeleton for the kernel
  + Enable libbpf's strict mode by default
  + Show program &amp; link type names
  + Support showing program names declared in BTF
  + Add BPF_TRACE_KPROBE_MULTI to attach type names table
  + Check unprivileged_bpf_disabled against value of 2
  + Use sysfs vmlinux when dumping BTF by ID
- Drop libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch as the fix is now
  included</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697803200">- Update bpftool align with v6.4-based kernel
  + Support for KIND_RESTRICT in gen min_core_btf command
  + Support BPF_MAP_TYPE_USER_RINGBUF map type
  + Support new cgroup local storage
  + Support printing opcodes and source file references in CFG
  + Probe for memcg-based accounting and bump rlimit only if needed
  + Allow toggling autoattach for bpf prog load|loadall
  + Remove support of --legacy option for bpftool
  + Remove BPF_OBJ_NAME_LEN restriction when looking up bpf program by name</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1705924800">- Update bpftool to align with v6.5-based kernel
  * show map IDs along with struct_ops links
  * show map IDs instead of raw value for map_of_maps types
  * show target_{obj,btf}_id in tracing link info</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Enable showing info for processes holding BPF map/prog/link/btf FDs
  (jsc#PED-8375)</changelog>
</package>
<package pkgid="4fe9a244459f281c3abd13b21602e2aa62ff15418a2257f77d3d491c81f7b56d" name="bpftool" arch="src">
  <version epoch="0" ver="6.4.0" rel="150600.19.3.3"/>
  <changelog author="mrostecki@opensuse.org" date="1557403200">- Initial release</changelog>
  <changelog author="lnussel@suse.de" date="1578484800">- use optflags for building
- build and install man pages</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1683115200">- Add dwarves as build dependency as pahole is called during build
- Fix BTF-to-C converter's padding logic (jsc#PED-3924)
  New patch: libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1693569600">- Update bpftool align with v5.19-based kernel
  + Implement BTFGen (i.e gen min_core_btf command)
  + Support for new btf kind BTF_KIND_DECL_TAG and BTF_KIND_TYPE_TAG
  + Support multiple .rodata/.data internal maps in skeleton
  + Probes for bounded loops, instruction set extensions, and offload-enabled
  + Generate Light skeleton for the kernel
  + Enable libbpf's strict mode by default
  + Show program &amp; link type names
  + Support showing program names declared in BTF
  + Add BPF_TRACE_KPROBE_MULTI to attach type names table
  + Check unprivileged_bpf_disabled against value of 2
  + Use sysfs vmlinux when dumping BTF by ID
- Drop libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch as the fix is now
  included</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697803200">- Update bpftool align with v6.4-based kernel
  + Support for KIND_RESTRICT in gen min_core_btf command
  + Support BPF_MAP_TYPE_USER_RINGBUF map type
  + Support new cgroup local storage
  + Support printing opcodes and source file references in CFG
  + Probe for memcg-based accounting and bump rlimit only if needed
  + Allow toggling autoattach for bpf prog load|loadall
  + Remove support of --legacy option for bpftool
  + Remove BPF_OBJ_NAME_LEN restriction when looking up bpf program by name</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1705924800">- Update bpftool to align with v6.5-based kernel
  * show map IDs along with struct_ops links
  * show map IDs instead of raw value for map_of_maps types
  * show target_{obj,btf}_id in tracing link info</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Enable showing info for processes holding BPF map/prog/link/btf FDs
  (jsc#PED-8375)</changelog>
</package>
<package pkgid="c4da7c84826b7addba3974cf3dd18142391cf1f7c9222c29f1f63c035174e61d" name="bpftool" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150600.19.3.3"/>
  <changelog author="mrostecki@opensuse.org" date="1557403200">- Initial release</changelog>
  <changelog author="lnussel@suse.de" date="1578484800">- use optflags for building
- build and install man pages</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1683115200">- Add dwarves as build dependency as pahole is called during build
- Fix BTF-to-C converter's padding logic (jsc#PED-3924)
  New patch: libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1693569600">- Update bpftool align with v5.19-based kernel
  + Implement BTFGen (i.e gen min_core_btf command)
  + Support for new btf kind BTF_KIND_DECL_TAG and BTF_KIND_TYPE_TAG
  + Support multiple .rodata/.data internal maps in skeleton
  + Probes for bounded loops, instruction set extensions, and offload-enabled
  + Generate Light skeleton for the kernel
  + Enable libbpf's strict mode by default
  + Show program &amp; link type names
  + Support showing program names declared in BTF
  + Add BPF_TRACE_KPROBE_MULTI to attach type names table
  + Check unprivileged_bpf_disabled against value of 2
  + Use sysfs vmlinux when dumping BTF by ID
- Drop libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch as the fix is now
  included</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697803200">- Update bpftool align with v6.4-based kernel
  + Support for KIND_RESTRICT in gen min_core_btf command
  + Support BPF_MAP_TYPE_USER_RINGBUF map type
  + Support new cgroup local storage
  + Support printing opcodes and source file references in CFG
  + Probe for memcg-based accounting and bump rlimit only if needed
  + Allow toggling autoattach for bpf prog load|loadall
  + Remove support of --legacy option for bpftool
  + Remove BPF_OBJ_NAME_LEN restriction when looking up bpf program by name</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1705924800">- Update bpftool to align with v6.5-based kernel
  * show map IDs along with struct_ops links
  * show map IDs instead of raw value for map_of_maps types
  * show target_{obj,btf}_id in tracing link info</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Enable showing info for processes holding BPF map/prog/link/btf FDs
  (jsc#PED-8375)</changelog>
</package>
<package pkgid="8a03473b243e062804c962a7f4ed05f2f8c2cb5642cb27de9fc7080caedb3fe0" name="bsdtar" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="150600.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631448000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1634817600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636286400">- update to 3.5.2:
  * CPIO: Support for PWB and v7 binary cpio formats
  * ZIP reader: Support of deflate algorithm in symbolic link decompression
  * security: fix handling of symbolic link ACLs on Linux (boo#1192425)
  * security: never follow symlinks when setting file flags on Linux (boo#1192426)
  * security: do not follow symlinks when processing the fixup list (boo#1192427)
  * fix extraction of hardlinks to symlinks
  * 7zip reader and writer fixes
  * RAR reader fixes
  * ZIP reader: fix excessive read for padded zip
  * CAB reader: fix double free
  * handle short writes from archive_write_callback
- Drop upstream mereged:
  * CVE-2021-23177.patch
  * CVE-2021-31566.patch
  * bsc1192427.patch</changelog>
  <changelog author="adrian@suse.de" date="1638187200">- fix permission settings on following symlinks (fix-following-symlinks.patch)
  this fixes also wrong permissions of /var/tmp in factory systems
  CVE-2021-31566</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645617600">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="rpm@fthiessen.de" date="1645704000">- Update to 3.6.0
  * Fix use-after-free bug (CVE-2021-36976)
  * tar: new option "--no-read-sparse"
  * tar: threads support for zstd
  * RAR reader: filter support
  * RAR5 reader: self-extracting archive support
  * ZIP reader: zstd decompression support
  * tar: respect "--ignore-zeros" in c, r and u modes
  * reduced size of application binaries
  * internal code optimizations
- Drop upstream merged:
  * fix-following-symlinks.patch
  * fix-CVE-2021-36976.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649332800">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 3.6.1:
  * 7zip reader: fix PPMD read beyond boundary (#1671)
  * ZIP reader: fix possible out of bounds read (OSS-Fuzz 38766 #1672)
  * ISO reader: fix possible heap buffer overflow in read_children() (OSS-Fuzz 38764, #1685)
  * RARv4 redaer: fix multiple issues in RARv4 filter code (introduced in libarchive 3.6.0)
  * fix heap use after free in archive_read_format_rar_read_data() (OSS-Fuzz 44547, 52efa50)
  * fix null dereference in read_data_compressed() (OSS-Fuzz 44843, 1271f77)
  * fix heap user after free in run_filters() (OSS-Fuzz 46279, #1715)
- Drop upstream merged fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 3.6.2 (bsc#1205629, CVE-2022-36227)
  * NULL pointer dereference vulnerability in archive_write.c
  * include ZSTD in Windows builds (#1688)
  * SSL fixes on Windows (#1714, #1723, #1724)
  * rar5 reader: fix possible garbled output with bsdtar -O (#1745)
  * mtree reader: support reading mtree files with tabs (#1783)
  * various small fixes for issues found by CodeQL
- Drop upstream merged CVE-2022-36227.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1690200000">- update to 3.7.0
  * bsdunzip port from FreeBSD
  * fix 2 year 2038 issues</changelog>
  <changelog author="dmueller@suse.com" date="1694952000">- update to 3.7.2:
  * Multiple vulnerabilities have been fixed in the PAX writer
  * bsdunzip(1) now correctly handles arguments following an
  - x after the zipfile
  * zstd filter now supports the "long" write option
  * SEGV and stack buffer overflow in verbose mode of cpio
  * bsdunzip updated to match latest upstream code
  * miscellaneous functional bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1703851200">- skip write tests on 32bit, they OOM</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718193600">- Fix CVE-2024-20696, heap based out-of-bounds write
  (CVE-2024-20696, bsc#1225971)
  * CVE-2024-20696.patch
- Fix CVE-2024-20697, Out of bounds Remote Code Execution Vulnerability
  (CVE-2024-20697, bsc#1225972)
  * CVE-2024-20697.patch</changelog>
</package>
<package pkgid="f5ee32f1eea6fa390041562f89cc2f5ec1d7d91649ed315cb2c8b11469a7042d" name="bsdtar" arch="ppc64le">
  <version epoch="0" ver="3.7.2" rel="150600.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631448000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1634817600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636286400">- update to 3.5.2:
  * CPIO: Support for PWB and v7 binary cpio formats
  * ZIP reader: Support of deflate algorithm in symbolic link decompression
  * security: fix handling of symbolic link ACLs on Linux (boo#1192425)
  * security: never follow symlinks when setting file flags on Linux (boo#1192426)
  * security: do not follow symlinks when processing the fixup list (boo#1192427)
  * fix extraction of hardlinks to symlinks
  * 7zip reader and writer fixes
  * RAR reader fixes
  * ZIP reader: fix excessive read for padded zip
  * CAB reader: fix double free
  * handle short writes from archive_write_callback
- Drop upstream mereged:
  * CVE-2021-23177.patch
  * CVE-2021-31566.patch
  * bsc1192427.patch</changelog>
  <changelog author="adrian@suse.de" date="1638187200">- fix permission settings on following symlinks (fix-following-symlinks.patch)
  this fixes also wrong permissions of /var/tmp in factory systems
  CVE-2021-31566</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645617600">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="rpm@fthiessen.de" date="1645704000">- Update to 3.6.0
  * Fix use-after-free bug (CVE-2021-36976)
  * tar: new option "--no-read-sparse"
  * tar: threads support for zstd
  * RAR reader: filter support
  * RAR5 reader: self-extracting archive support
  * ZIP reader: zstd decompression support
  * tar: respect "--ignore-zeros" in c, r and u modes
  * reduced size of application binaries
  * internal code optimizations
- Drop upstream merged:
  * fix-following-symlinks.patch
  * fix-CVE-2021-36976.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649332800">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 3.6.1:
  * 7zip reader: fix PPMD read beyond boundary (#1671)
  * ZIP reader: fix possible out of bounds read (OSS-Fuzz 38766 #1672)
  * ISO reader: fix possible heap buffer overflow in read_children() (OSS-Fuzz 38764, #1685)
  * RARv4 redaer: fix multiple issues in RARv4 filter code (introduced in libarchive 3.6.0)
  * fix heap use after free in archive_read_format_rar_read_data() (OSS-Fuzz 44547, 52efa50)
  * fix null dereference in read_data_compressed() (OSS-Fuzz 44843, 1271f77)
  * fix heap user after free in run_filters() (OSS-Fuzz 46279, #1715)
- Drop upstream merged fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 3.6.2 (bsc#1205629, CVE-2022-36227)
  * NULL pointer dereference vulnerability in archive_write.c
  * include ZSTD in Windows builds (#1688)
  * SSL fixes on Windows (#1714, #1723, #1724)
  * rar5 reader: fix possible garbled output with bsdtar -O (#1745)
  * mtree reader: support reading mtree files with tabs (#1783)
  * various small fixes for issues found by CodeQL
- Drop upstream merged CVE-2022-36227.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1690200000">- update to 3.7.0
  * bsdunzip port from FreeBSD
  * fix 2 year 2038 issues</changelog>
  <changelog author="dmueller@suse.com" date="1694952000">- update to 3.7.2:
  * Multiple vulnerabilities have been fixed in the PAX writer
  * bsdunzip(1) now correctly handles arguments following an
  - x after the zipfile
  * zstd filter now supports the "long" write option
  * SEGV and stack buffer overflow in verbose mode of cpio
  * bsdunzip updated to match latest upstream code
  * miscellaneous functional bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1703851200">- skip write tests on 32bit, they OOM</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718193600">- Fix CVE-2024-20696, heap based out-of-bounds write
  (CVE-2024-20696, bsc#1225971)
  * CVE-2024-20696.patch
- Fix CVE-2024-20697, Out of bounds Remote Code Execution Vulnerability
  (CVE-2024-20697, bsc#1225972)
  * CVE-2024-20697.patch</changelog>
</package>
<package pkgid="c95117259e254e986622834d0f12a627b8676d5bbcb39b1d5ac7f39f1c8fa16b" name="bsdtar" arch="s390x">
  <version epoch="0" ver="3.7.2" rel="150600.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631448000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1634817600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636286400">- update to 3.5.2:
  * CPIO: Support for PWB and v7 binary cpio formats
  * ZIP reader: Support of deflate algorithm in symbolic link decompression
  * security: fix handling of symbolic link ACLs on Linux (boo#1192425)
  * security: never follow symlinks when setting file flags on Linux (boo#1192426)
  * security: do not follow symlinks when processing the fixup list (boo#1192427)
  * fix extraction of hardlinks to symlinks
  * 7zip reader and writer fixes
  * RAR reader fixes
  * ZIP reader: fix excessive read for padded zip
  * CAB reader: fix double free
  * handle short writes from archive_write_callback
- Drop upstream mereged:
  * CVE-2021-23177.patch
  * CVE-2021-31566.patch
  * bsc1192427.patch</changelog>
  <changelog author="adrian@suse.de" date="1638187200">- fix permission settings on following symlinks (fix-following-symlinks.patch)
  this fixes also wrong permissions of /var/tmp in factory systems
  CVE-2021-31566</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645617600">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="rpm@fthiessen.de" date="1645704000">- Update to 3.6.0
  * Fix use-after-free bug (CVE-2021-36976)
  * tar: new option "--no-read-sparse"
  * tar: threads support for zstd
  * RAR reader: filter support
  * RAR5 reader: self-extracting archive support
  * ZIP reader: zstd decompression support
  * tar: respect "--ignore-zeros" in c, r and u modes
  * reduced size of application binaries
  * internal code optimizations
- Drop upstream merged:
  * fix-following-symlinks.patch
  * fix-CVE-2021-36976.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649332800">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 3.6.1:
  * 7zip reader: fix PPMD read beyond boundary (#1671)
  * ZIP reader: fix possible out of bounds read (OSS-Fuzz 38766 #1672)
  * ISO reader: fix possible heap buffer overflow in read_children() (OSS-Fuzz 38764, #1685)
  * RARv4 redaer: fix multiple issues in RARv4 filter code (introduced in libarchive 3.6.0)
  * fix heap use after free in archive_read_format_rar_read_data() (OSS-Fuzz 44547, 52efa50)
  * fix null dereference in read_data_compressed() (OSS-Fuzz 44843, 1271f77)
  * fix heap user after free in run_filters() (OSS-Fuzz 46279, #1715)
- Drop upstream merged fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 3.6.2 (bsc#1205629, CVE-2022-36227)
  * NULL pointer dereference vulnerability in archive_write.c
  * include ZSTD in Windows builds (#1688)
  * SSL fixes on Windows (#1714, #1723, #1724)
  * rar5 reader: fix possible garbled output with bsdtar -O (#1745)
  * mtree reader: support reading mtree files with tabs (#1783)
  * various small fixes for issues found by CodeQL
- Drop upstream merged CVE-2022-36227.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1690200000">- update to 3.7.0
  * bsdunzip port from FreeBSD
  * fix 2 year 2038 issues</changelog>
  <changelog author="dmueller@suse.com" date="1694952000">- update to 3.7.2:
  * Multiple vulnerabilities have been fixed in the PAX writer
  * bsdunzip(1) now correctly handles arguments following an
  - x after the zipfile
  * zstd filter now supports the "long" write option
  * SEGV and stack buffer overflow in verbose mode of cpio
  * bsdunzip updated to match latest upstream code
  * miscellaneous functional bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1703851200">- skip write tests on 32bit, they OOM</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718193600">- Fix CVE-2024-20696, heap based out-of-bounds write
  (CVE-2024-20696, bsc#1225971)
  * CVE-2024-20696.patch
- Fix CVE-2024-20697, Out of bounds Remote Code Execution Vulnerability
  (CVE-2024-20697, bsc#1225972)
  * CVE-2024-20697.patch</changelog>
</package>
<package pkgid="8b600888f960721ddbcee096bc9e3783eee1f2954b96bc1de93ae7f8792d2e0d" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="150600.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631448000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1634817600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636286400">- update to 3.5.2:
  * CPIO: Support for PWB and v7 binary cpio formats
  * ZIP reader: Support of deflate algorithm in symbolic link decompression
  * security: fix handling of symbolic link ACLs on Linux (boo#1192425)
  * security: never follow symlinks when setting file flags on Linux (boo#1192426)
  * security: do not follow symlinks when processing the fixup list (boo#1192427)
  * fix extraction of hardlinks to symlinks
  * 7zip reader and writer fixes
  * RAR reader fixes
  * ZIP reader: fix excessive read for padded zip
  * CAB reader: fix double free
  * handle short writes from archive_write_callback
- Drop upstream mereged:
  * CVE-2021-23177.patch
  * CVE-2021-31566.patch
  * bsc1192427.patch</changelog>
  <changelog author="adrian@suse.de" date="1638187200">- fix permission settings on following symlinks (fix-following-symlinks.patch)
  this fixes also wrong permissions of /var/tmp in factory systems
  CVE-2021-31566</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645617600">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="rpm@fthiessen.de" date="1645704000">- Update to 3.6.0
  * Fix use-after-free bug (CVE-2021-36976)
  * tar: new option "--no-read-sparse"
  * tar: threads support for zstd
  * RAR reader: filter support
  * RAR5 reader: self-extracting archive support
  * ZIP reader: zstd decompression support
  * tar: respect "--ignore-zeros" in c, r and u modes
  * reduced size of application binaries
  * internal code optimizations
- Drop upstream merged:
  * fix-following-symlinks.patch
  * fix-CVE-2021-36976.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649332800">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 3.6.1:
  * 7zip reader: fix PPMD read beyond boundary (#1671)
  * ZIP reader: fix possible out of bounds read (OSS-Fuzz 38766 #1672)
  * ISO reader: fix possible heap buffer overflow in read_children() (OSS-Fuzz 38764, #1685)
  * RARv4 redaer: fix multiple issues in RARv4 filter code (introduced in libarchive 3.6.0)
  * fix heap use after free in archive_read_format_rar_read_data() (OSS-Fuzz 44547, 52efa50)
  * fix null dereference in read_data_compressed() (OSS-Fuzz 44843, 1271f77)
  * fix heap user after free in run_filters() (OSS-Fuzz 46279, #1715)
- Drop upstream merged fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 3.6.2 (bsc#1205629, CVE-2022-36227)
  * NULL pointer dereference vulnerability in archive_write.c
  * include ZSTD in Windows builds (#1688)
  * SSL fixes on Windows (#1714, #1723, #1724)
  * rar5 reader: fix possible garbled output with bsdtar -O (#1745)
  * mtree reader: support reading mtree files with tabs (#1783)
  * various small fixes for issues found by CodeQL
- Drop upstream merged CVE-2022-36227.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1690200000">- update to 3.7.0
  * bsdunzip port from FreeBSD
  * fix 2 year 2038 issues</changelog>
  <changelog author="dmueller@suse.com" date="1694952000">- update to 3.7.2:
  * Multiple vulnerabilities have been fixed in the PAX writer
  * bsdunzip(1) now correctly handles arguments following an
  - x after the zipfile
  * zstd filter now supports the "long" write option
  * SEGV and stack buffer overflow in verbose mode of cpio
  * bsdunzip updated to match latest upstream code
  * miscellaneous functional bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1703851200">- skip write tests on 32bit, they OOM</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718193600">- Fix CVE-2024-20696, heap based out-of-bounds write
  (CVE-2024-20696, bsc#1225971)
  * CVE-2024-20696.patch
- Fix CVE-2024-20697, Out of bounds Remote Code Execution Vulnerability
  (CVE-2024-20697, bsc#1225972)
  * CVE-2024-20697.patch</changelog>
</package>
<package pkgid="5276f5731a26485c4f5c45f9f4786ce0c965e365f5c6a204b6442771700d26e8" name="bubblewrap" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="150500.3.3.1"/>
  <changelog author="klember@redhat.com" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="walters@verbum.org" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
  <changelog author="alarrosa@suse.com" date="1559908800">- Use /bin/bash instead of /usr/bin/bash in SLE12</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576843200">- Update to version 0.4.0:
  + The biggest feature in this release is the support for joining
    existing user and pid namespaces. This doesn't work in the
    setuid mode (at the moment).
  + Other changes:
  - Stores namespace info in status json.
  - In setuid mode pid 1 is now marked dumpable.
  - Now builds with musl libc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
</package>
<package pkgid="2f7daf41a36f9293c3db8a4d3c912ce5900ef9ca14076fa4c5aee1e87de733bc" name="bubblewrap" arch="ppc64le">
  <version epoch="0" ver="0.8.0" rel="150500.3.3.1"/>
  <changelog author="klember@redhat.com" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="walters@verbum.org" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
  <changelog author="alarrosa@suse.com" date="1559908800">- Use /bin/bash instead of /usr/bin/bash in SLE12</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576843200">- Update to version 0.4.0:
  + The biggest feature in this release is the support for joining
    existing user and pid namespaces. This doesn't work in the
    setuid mode (at the moment).
  + Other changes:
  - Stores namespace info in status json.
  - In setuid mode pid 1 is now marked dumpable.
  - Now builds with musl libc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
</package>
<package pkgid="0b9fe124d48c0273b9eb2efeec8dd08784ce7f42f4b4a44e6de97aef2487b181" name="bubblewrap" arch="s390x">
  <version epoch="0" ver="0.8.0" rel="150500.3.3.1"/>
  <changelog author="klember@redhat.com" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="walters@verbum.org" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
  <changelog author="alarrosa@suse.com" date="1559908800">- Use /bin/bash instead of /usr/bin/bash in SLE12</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576843200">- Update to version 0.4.0:
  + The biggest feature in this release is the support for joining
    existing user and pid namespaces. This doesn't work in the
    setuid mode (at the moment).
  + Other changes:
  - Stores namespace info in status json.
  - In setuid mode pid 1 is now marked dumpable.
  - Now builds with musl libc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
</package>
<package pkgid="0b969800f641af58d86e8ebd1bac6e19ea0cd0af538fe5dd150a13ae0cc010fc" name="bubblewrap" arch="src">
  <version epoch="0" ver="0.8.0" rel="150500.3.3.1"/>
  <changelog author="klember@redhat.com" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="walters@verbum.org" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
  <changelog author="alarrosa@suse.com" date="1559908800">- Use /bin/bash instead of /usr/bin/bash in SLE12</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576843200">- Update to version 0.4.0:
  + The biggest feature in this release is the support for joining
    existing user and pid namespaces. This doesn't work in the
    setuid mode (at the moment).
  + Other changes:
  - Stores namespace info in status json.
  - In setuid mode pid 1 is now marked dumpable.
  - Now builds with musl libc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
</package>
<package pkgid="956c5d8498abc4c077421b5e4ad541e14673b103d12fe42da4c7bab0314ad278" name="bubblewrap" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150500.3.3.1"/>
  <changelog author="klember@redhat.com" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="walters@verbum.org" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
  <changelog author="alarrosa@suse.com" date="1559908800">- Use /bin/bash instead of /usr/bin/bash in SLE12</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576843200">- Update to version 0.4.0:
  + The biggest feature in this release is the support for joining
    existing user and pid namespaces. This doesn't work in the
    setuid mode (at the moment).
  + Other changes:
  - Stores namespace info in status json.
  - In setuid mode pid 1 is now marked dumpable.
  - Now builds with musl libc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
</package>
<package pkgid="c8de47ef307e255edd150260d2c6c252a07a4d80b26eed95eb81330e9ff4fe1a" name="bubblewrap-zsh-completion" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="150500.3.3.1"/>
  <changelog author="klember@redhat.com" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="walters@verbum.org" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
  <changelog author="alarrosa@suse.com" date="1559908800">- Use /bin/bash instead of /usr/bin/bash in SLE12</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576843200">- Update to version 0.4.0:
  + The biggest feature in this release is the support for joining
    existing user and pid namespaces. This doesn't work in the
    setuid mode (at the moment).
  + Other changes:
  - Stores namespace info in status json.
  - In setuid mode pid 1 is now marked dumpable.
  - Now builds with musl libc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
</package>
<package pkgid="5f46c7f13eec0d403f29c1863ee48572d3d00890c14e6d32f05f84f75187a00d" name="bubblewrap-zsh-completion" arch="ppc64le">
  <version epoch="0" ver="0.8.0" rel="150500.3.3.1"/>
  <changelog author="klember@redhat.com" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="walters@verbum.org" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
  <changelog author="alarrosa@suse.com" date="1559908800">- Use /bin/bash instead of /usr/bin/bash in SLE12</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576843200">- Update to version 0.4.0:
  + The biggest feature in this release is the support for joining
    existing user and pid namespaces. This doesn't work in the
    setuid mode (at the moment).
  + Other changes:
  - Stores namespace info in status json.
  - In setuid mode pid 1 is now marked dumpable.
  - Now builds with musl libc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
</package>
<package pkgid="b9ef684a283e5942ccccc6a73b99fd88982ad07042fab71ab52595dcbd196bbe" name="bubblewrap-zsh-completion" arch="s390x">
  <version epoch="0" ver="0.8.0" rel="150500.3.3.1"/>
  <changelog author="klember@redhat.com" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="walters@verbum.org" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
  <changelog author="alarrosa@suse.com" date="1559908800">- Use /bin/bash instead of /usr/bin/bash in SLE12</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576843200">- Update to version 0.4.0:
  + The biggest feature in this release is the support for joining
    existing user and pid namespaces. This doesn't work in the
    setuid mode (at the moment).
  + Other changes:
  - Stores namespace info in status json.
  - In setuid mode pid 1 is now marked dumpable.
  - Now builds with musl libc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
</package>
<package pkgid="555f6e2eb276407c59429f08ad8dc2f125a89081e5a26e92768671c90aa7e2e7" name="bubblewrap-zsh-completion" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150500.3.3.1"/>
  <changelog author="klember@redhat.com" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="walters@verbum.org" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
  <changelog author="alarrosa@suse.com" date="1559908800">- Use /bin/bash instead of /usr/bin/bash in SLE12</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576843200">- Update to version 0.4.0:
  + The biggest feature in this release is the support for joining
    existing user and pid namespaces. This doesn't work in the
    setuid mode (at the moment).
  + Other changes:
  - Stores namespace info in status json.
  - In setuid mode pid 1 is now marked dumpable.
  - Now builds with musl libc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
</package>
<package pkgid="20fe22671c5376cef3be4895fb1889e455ebfcec49e4b7228c183f178c3a2a22" name="byte-buddy" arch="noarch">
  <version epoch="0" ver="1.14.16" rel="150200.5.7.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1678276800">- Initial packaging with v1.14.0
- Add patch:
  * 00-asm5.patch
    ~ asm5 does not support the Opcodes.V20 constant</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1679313600">- Update to v1.14.2
  * Changes of v1.14.2
    + Fix offset mapping for local variable array remapping in
    Advice.
    + Add possibility to specify an index for skipOn and repeatOn
    which resolves the checked value from a returned array.
  * Changes of 1.14.1
    + Add extended scope for Maven Byte Buddy plugin to include all
    non-test-dependencies.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1680436800">- Update to v1.14.3
  * Changes of v1.14.3
    + Make MethodGraph.Compiler failsafe when processing incomplete
    methods.
    + Update ASM.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1680523200">- Remove patch:
  * 00-asm5.patch - not needed due to update of objectweb-asm</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1681387200">- Update to v1.14.4
  * Changes of v1.14.4
    + Include instrumented type and auxiliary types in TypePool
    that is passed to TypeWriter.</changelog>
  <changelog author="fstrba@suse.com" date="1683288000">- Do not bootstrap using downloaded binaries, but build the
  minimal bootstrap package from sources</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1686398400">- Update to v1.14.5
  * Changes of v1.14.5
    + Avoid use of location if agent argument separator is
    contained.
    + Allow failure of member substitution if no element is
    separated.
    + Allow retry in case of parallel class injection.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1692100800">- Update to v1.14.6
  * Changes of v1.14.6
    + Add PatchMode.SUBSTITUTE and
    ResettableClassFileTransformer.Substitutable for in-order
    patching.
    + Allow for explicit specification og differential matcher when
    patching an AgentBuilder.
    + Add platform loader to locator for build plugins.
    + Correctly resolve accessors for fields with capitalized first
    letter.
    + Make jars for Android read-only as newer versions require it.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1693483200">- Update to v1.14.7
  * Changes of v1.14.7
    + Correctly read minor version from class file.
    + Catch type resolution errors when applying Plugin.Engine.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1694692800">- Update to v1.14.8
  * Changes of v1.14.8
    + Correctly read versions from class file that would use both
    bytes.
    + Fix Byte Buddy Gradle plugin for Gradle 8.3+.
    + Correct field and static method access on subtypes in
    MemberSubstitution.
    + Support APK 7.4+ versions in Byte Buddy Gradle for Android
    plugin.
- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="fstrba@suse.com" date="1695816000">- Remove dependency on findbugs
- Do not produce bootstrap package</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1697544000">- Update to v1.14.9
  * Changes of v1.14.9
    + Update ASM to version 9.6
    + Support Android plugin to support APG version 7.4</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1703073600">- Update to v1.14.10
  * Changes of v1.14.10
    + Add lazy facade to default TypePool in AgentBuilder to avoid
    parsing of types ignored by name.
    + Avoid module info classes in Android plugin.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1703160000">- Update to v1.14.11
  * Changes of v1.14.11
    + Adjusts Gradle plugin to support Gradle 8.4 without warnings.
    + Avoid blurry exception on build plugin for fail fast.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1708171200">- Update to v1.14.12
  * Changes of v1.14.12
    + Pin proxy class file version to avoid implicit changes when
    using Graal native image.
    + Add support for Java 23.
    + Add missing @MaybeNull annotation.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1711627200">- Update to v1.14.13
  * Changes of v1.14.13
    + Avoid resolving type variables when generic type processing
    is disabled.
    + Improve error message for Byte Buddy agent external attach.
    + Fix build for modular jars when using later version than Java
    8.</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Split the whole package into sub-packages
- Added patch:
  * 0001-Avoid-bundling-asm.patch
    + Do not bundle asm, but use external artifact
  * 0002-Remove-dependencies.patch
    + Remove optional dependency on jna</changelog>
  <changelog author="fstrba@suse.com" date="1716292800">- Upgrade to v1.14.15
  * Changes of v1.14.15
    + Allow attaching from root on J9.
  * Changes of v1.14.14
    + Adjust type validation to accept additional names that are
    legal in the class file format.
    + Fix dynamic attach on Windows when a service user is active.
    + Avoid failure when using Android's strict mode.
- Removed patch:
  * 0002-Remove-dependencies.patch
    + not needed since we have jna packaged</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1716465600">- Update to v1.14.16
  * Changes of v1.14.16
    + Update ASM and introduce support for Java 23.</changelog>
</package>
<package pkgid="9eb5a8b2307fbcff380790e6af19453458c223d6ab266adfd6582d9d5fb13f61" name="byte-buddy" arch="src">
  <version epoch="0" ver="1.14.16" rel="150200.5.7.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1678276800">- Initial packaging with v1.14.0
- Add patch:
  * 00-asm5.patch
    ~ asm5 does not support the Opcodes.V20 constant</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1679313600">- Update to v1.14.2
  * Changes of v1.14.2
    + Fix offset mapping for local variable array remapping in
    Advice.
    + Add possibility to specify an index for skipOn and repeatOn
    which resolves the checked value from a returned array.
  * Changes of 1.14.1
    + Add extended scope for Maven Byte Buddy plugin to include all
    non-test-dependencies.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1680436800">- Update to v1.14.3
  * Changes of v1.14.3
    + Make MethodGraph.Compiler failsafe when processing incomplete
    methods.
    + Update ASM.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1680523200">- Remove patch:
  * 00-asm5.patch - not needed due to update of objectweb-asm</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1681387200">- Update to v1.14.4
  * Changes of v1.14.4
    + Include instrumented type and auxiliary types in TypePool
    that is passed to TypeWriter.</changelog>
  <changelog author="fstrba@suse.com" date="1683288000">- Do not bootstrap using downloaded binaries, but build the
  minimal bootstrap package from sources</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1686398400">- Update to v1.14.5
  * Changes of v1.14.5
    + Avoid use of location if agent argument separator is
    contained.
    + Allow failure of member substitution if no element is
    separated.
    + Allow retry in case of parallel class injection.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1692100800">- Update to v1.14.6
  * Changes of v1.14.6
    + Add PatchMode.SUBSTITUTE and
    ResettableClassFileTransformer.Substitutable for in-order
    patching.
    + Allow for explicit specification og differential matcher when
    patching an AgentBuilder.
    + Add platform loader to locator for build plugins.
    + Correctly resolve accessors for fields with capitalized first
    letter.
    + Make jars for Android read-only as newer versions require it.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1693483200">- Update to v1.14.7
  * Changes of v1.14.7
    + Correctly read minor version from class file.
    + Catch type resolution errors when applying Plugin.Engine.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1694692800">- Update to v1.14.8
  * Changes of v1.14.8
    + Correctly read versions from class file that would use both
    bytes.
    + Fix Byte Buddy Gradle plugin for Gradle 8.3+.
    + Correct field and static method access on subtypes in
    MemberSubstitution.
    + Support APK 7.4+ versions in Byte Buddy Gradle for Android
    plugin.
- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="fstrba@suse.com" date="1695816000">- Remove dependency on findbugs
- Do not produce bootstrap package</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1697544000">- Update to v1.14.9
  * Changes of v1.14.9
    + Update ASM to version 9.6
    + Support Android plugin to support APG version 7.4</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1703073600">- Update to v1.14.10
  * Changes of v1.14.10
    + Add lazy facade to default TypePool in AgentBuilder to avoid
    parsing of types ignored by name.
    + Avoid module info classes in Android plugin.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1703160000">- Update to v1.14.11
  * Changes of v1.14.11
    + Adjusts Gradle plugin to support Gradle 8.4 without warnings.
    + Avoid blurry exception on build plugin for fail fast.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1708171200">- Update to v1.14.12
  * Changes of v1.14.12
    + Pin proxy class file version to avoid implicit changes when
    using Graal native image.
    + Add support for Java 23.
    + Add missing @MaybeNull annotation.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1711627200">- Update to v1.14.13
  * Changes of v1.14.13
    + Avoid resolving type variables when generic type processing
    is disabled.
    + Improve error message for Byte Buddy agent external attach.
    + Fix build for modular jars when using later version than Java
    8.</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Split the whole package into sub-packages
- Added patch:
  * 0001-Avoid-bundling-asm.patch
    + Do not bundle asm, but use external artifact
  * 0002-Remove-dependencies.patch
    + Remove optional dependency on jna</changelog>
  <changelog author="fstrba@suse.com" date="1716292800">- Upgrade to v1.14.15
  * Changes of v1.14.15
    + Allow attaching from root on J9.
  * Changes of v1.14.14
    + Adjust type validation to accept additional names that are
    legal in the class file format.
    + Fix dynamic attach on Windows when a service user is active.
    + Avoid failure when using Android's strict mode.
- Removed patch:
  * 0002-Remove-dependencies.patch
    + not needed since we have jna packaged</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1716465600">- Update to v1.14.16
  * Changes of v1.14.16
    + Update ASM and introduce support for Java 23.</changelog>
</package>
<package pkgid="f8b513e54e4436f50e79eefd7aacf5e4be476049ca857aff811e5485ad8088e8" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.78.0" rel="150500.27.12.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
  <changelog author="william.brown@suse.com" date="1693137600">- Update to version 1.72.0 - for details see the rust1.72 package</changelog>
  <changelog author="william.brown@suse.com" date="1696593600">- Update to version 1.73.0 - for details see the rust1.73 package</changelog>
  <changelog author="william.brown@suse.com" date="1700222400">- Update to version 1.74.0 - for details see the rust1.74 package</changelog>
  <changelog author="william.brown@suse.com" date="1704110400">- Update to version 1.75.0 - for details see the rust1.75 package</changelog>
  <changelog author="william.brown@suse.com" date="1707480000">- Update to version 1.76.0 - for details see the rust1.76 package</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.77.0 - for details see the rust1.77 package</changelog>
  <changelog author="william.brown@suse.com" date="1715688000">- Update to version 1.78.0 - for details see the rust1.78 package</changelog>
</package>
<package pkgid="7bb204c9964d0932be24d1c0b734023e403ed22dce4a3396e73a5c2f721d9638" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.78.0" rel="150500.27.12.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
  <changelog author="william.brown@suse.com" date="1693137600">- Update to version 1.72.0 - for details see the rust1.72 package</changelog>
  <changelog author="william.brown@suse.com" date="1696593600">- Update to version 1.73.0 - for details see the rust1.73 package</changelog>
  <changelog author="william.brown@suse.com" date="1700222400">- Update to version 1.74.0 - for details see the rust1.74 package</changelog>
  <changelog author="william.brown@suse.com" date="1704110400">- Update to version 1.75.0 - for details see the rust1.75 package</changelog>
  <changelog author="william.brown@suse.com" date="1707480000">- Update to version 1.76.0 - for details see the rust1.76 package</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.77.0 - for details see the rust1.77 package</changelog>
  <changelog author="william.brown@suse.com" date="1715688000">- Update to version 1.78.0 - for details see the rust1.78 package</changelog>
</package>
<package pkgid="bf71a7ba837ae745728821957915cbde45ae7c3ef410da4e27e9e17d976c0c52" name="cargo" arch="s390x">
  <version epoch="0" ver="1.78.0" rel="150500.27.12.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
  <changelog author="william.brown@suse.com" date="1693137600">- Update to version 1.72.0 - for details see the rust1.72 package</changelog>
  <changelog author="william.brown@suse.com" date="1696593600">- Update to version 1.73.0 - for details see the rust1.73 package</changelog>
  <changelog author="william.brown@suse.com" date="1700222400">- Update to version 1.74.0 - for details see the rust1.74 package</changelog>
  <changelog author="william.brown@suse.com" date="1704110400">- Update to version 1.75.0 - for details see the rust1.75 package</changelog>
  <changelog author="william.brown@suse.com" date="1707480000">- Update to version 1.76.0 - for details see the rust1.76 package</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.77.0 - for details see the rust1.77 package</changelog>
  <changelog author="william.brown@suse.com" date="1715688000">- Update to version 1.78.0 - for details see the rust1.78 package</changelog>
</package>
<package pkgid="9bc1ed8d92dde938c344cae9101eda90f4c7ed7b6874b6237287c96ed3f27234" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.78.0" rel="150500.27.12.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
  <changelog author="william.brown@suse.com" date="1693137600">- Update to version 1.72.0 - for details see the rust1.72 package</changelog>
  <changelog author="william.brown@suse.com" date="1696593600">- Update to version 1.73.0 - for details see the rust1.73 package</changelog>
  <changelog author="william.brown@suse.com" date="1700222400">- Update to version 1.74.0 - for details see the rust1.74 package</changelog>
  <changelog author="william.brown@suse.com" date="1704110400">- Update to version 1.75.0 - for details see the rust1.75 package</changelog>
  <changelog author="william.brown@suse.com" date="1707480000">- Update to version 1.76.0 - for details see the rust1.76 package</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.77.0 - for details see the rust1.77 package</changelog>
  <changelog author="william.brown@suse.com" date="1715688000">- Update to version 1.78.0 - for details see the rust1.78 package</changelog>
</package>
<package pkgid="efde600d2ddc052d7e6fb056eca524c8a1f40070d7d2a32bf305eab11aeb5be8" name="cargo1.78" arch="aarch64">
  <version epoch="0" ver="1.78.0" rel="150500.11.3.1"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  Language
--------
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  Compiler
--------
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  Cargo
-----
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  Misc
----
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
</package>
<package pkgid="d67b7313415e650b76fa09e4b6b5cef00af669db544b9bc937dcae4fc01147df" name="cargo1.78" arch="ppc64le">
  <version epoch="0" ver="1.78.0" rel="150500.11.3.1"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  Language
--------
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  Compiler
--------
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  Cargo
-----
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  Misc
----
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
</package>
<package pkgid="36600d35db9e9a2e5efd1206ebcfe6e58bff23dbf3bae2fa4dc1645dfe1688b8" name="cargo1.78" arch="s390x">
  <version epoch="0" ver="1.78.0" rel="150500.11.3.1"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  Language
--------
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  Compiler
--------
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  Cargo
-----
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  Misc
----
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
</package>
<package pkgid="723efe343407d00c043abdc7214cd479d2e2f163e20478f31a6c47e7a8db099b" name="cargo1.78" arch="x86_64">
  <version epoch="0" ver="1.78.0" rel="150500.11.3.1"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  Language
--------
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  Compiler
--------
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  Cargo
-----
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  Misc
----
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
</package>
<package pkgid="0c918716dd3133b0c9a42b6c6ad16229652af8e8f6d16bf151a11fc07449fe59" name="catatonit" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="150500.3.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="c2188074196a8465a35210167a5d8a302da22b01afc7949a053ad95c480a6a8c" name="catatonit" arch="ppc64le">
  <version epoch="0" ver="0.2.0" rel="150500.3.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="55d041394501c44e7fbbbe51106167887d8ff69ea672bdba48527e9ad9c26640" name="catatonit" arch="s390x">
  <version epoch="0" ver="0.2.0" rel="150500.3.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="d920b241cc0190598a79d71c42adc1996e25a16167a5807bf35603ba874b8ebb" name="catatonit" arch="src">
  <version epoch="0" ver="0.2.0" rel="150500.3.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="0825a0191a963f7b04cd740fc07e1f0420dcff4e24bf9d5bb97b53ac97adaeaf" name="catatonit" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="150500.3.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="5f4f242f831de1a4a28f418826636e5d1d2522e73d6628ce4afc5b424c043074" name="chrony" arch="aarch64">
  <version epoch="0" ver="4.1" rel="150400.21.5.7"/>
  <changelog author="max@suse.com" date="1591272000">- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
</package>
<package pkgid="a19cc25ff1fb6bd15e0bfd85904f7c738f99c76df2902b50fea916f02f82b38b" name="chrony" arch="ppc64le">
  <version epoch="0" ver="4.1" rel="150400.21.5.7"/>
  <changelog author="max@suse.com" date="1591272000">- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
</package>
<package pkgid="e1190640d771df1780ab16895cb25c90e161976f795cf64926c7d8309881e7b9" name="chrony" arch="s390x">
  <version epoch="0" ver="4.1" rel="150400.21.5.7"/>
  <changelog author="max@suse.com" date="1591272000">- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
</package>
<package pkgid="f7238acd01282105926a1157baa94bcd5bd58f29e0b554dbaa21a26e0817b92f" name="chrony" arch="src">
  <version epoch="0" ver="4.1" rel="150400.21.5.7"/>
  <changelog author="max@suse.com" date="1591272000">- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
</package>
<package pkgid="dfc68e6d7c7310636b10ca2d9265c499b9615e7825a76093df2f387af4816e78" name="chrony" arch="x86_64">
  <version epoch="0" ver="4.1" rel="150400.21.5.7"/>
  <changelog author="max@suse.com" date="1591272000">- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
</package>
<package pkgid="ab728c0c71a7bf427d1778d83792fb31601f3dae0374cc705be770030157e41e" name="chrony-pool-empty" arch="noarch">
  <version epoch="0" ver="4.1" rel="150400.21.5.7"/>
  <changelog author="max@suse.com" date="1591272000">- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
</package>
<package pkgid="adb59fb891cb117c115b21872ba34a0f939183802c71b019c6da7f3551d351a5" name="chrony-pool-openSUSE" arch="noarch">
  <version epoch="0" ver="4.1" rel="150400.21.5.7"/>
  <changelog author="max@suse.com" date="1591272000">- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
</package>
<package pkgid="9a9a0cfdf95dc3158e57d034caf6edf746afb91816f3582795a13718e66e62f0" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="4.1" rel="150400.21.5.7"/>
  <changelog author="max@suse.com" date="1591272000">- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
</package>
<package pkgid="6c42edd4bad2765dad42f1db9aa877523f53c33bee5d6e60032fbca6b3d79e33" name="cluster-md-kmp-azure" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150600.8.5.4"/>
  <changelog author="mkubecek@suse.cz" date="1717416000">- series.conf: cleanup
  Fix subsection header to silence series_insert error.
- commit 4628dc3</changelog>
  <changelog author="mkubecek@suse.cz" date="1717416001">- netfilter: nf_tables: release mutex after nft_gc_seq_end from
  abort path (CVE-2024-26925 bsc#1223390).
- commit 578a709</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717416002">- Add reference to L3 bsc#1225765 in BPF control flow graph and precision backtrack fixes (bsc#1225756)
  The L3 bsc#1225765 was created seperately since our customer requires
  PTF.
- Update patches.suse/bpf-fix-precision-backtracking-instruction-iteration.patch
- Update patches.suse/bpf-handle-ldimm64-properly-in-check_cfg.patch
- Update patches.suse/selftests-bpf-add-edge-case-backtracking-logic-test.patch
- Update patches.suse/selftests-bpf-precision-tracking-test-for-BPF_NEG-an.patch
- commit 054635e</changelog>
  <changelog author="msuchanek@suse.de" date="1717416003">- powerpc/uaccess: Use YZ asm constraint for ld (bsc#1194869).
- powerpc/uaccess: Fix build errors seen with GCC 13/14
  (bsc#1194869).
- commit 46b5d84</changelog>
  <changelog author="msuchanek@suse.de" date="1717416004">- blacklist.conf: PPC fsl_msi is not used
- commit ae6590d</changelog>
  <changelog author="msuchanek@suse.de" date="1717416005">- powerpc/pseries/lparcfg: drop error message from guest name
  lookup (bsc#1187716 ltc#193451 git-fixes).
- commit ceab637</changelog>
  <changelog author="mfranc@suse.cz" date="1717416006">- Update
  patches.suse/ALSA-hda-intel-sdw-acpi-fix-usage-of-device_get_name.patch
  (git-fixes CVE-2024-36955).
- Update
  patches.suse/ARM-9381-1-kasan-clear-stale-stack-poison.patch
  (git-fixes bsc#1225715 CVE-2024-36906).
- Update
  patches.suse/Bluetooth-HCI-Fix-potential-null-ptr-deref.patch
  (git-fixes bsc#1225579 CVE-2024-36011).
- Update
  patches.suse/Bluetooth-L2CAP-Fix-slab-use-after-free-in-l2cap_con.patch
  (git-fixes bsc#1225578 CVE-2024-36013).
- Update
  patches.suse/Bluetooth-msft-fix-slab-use-after-free-in-msft_do_cl.patch
  (git-fixes bsc#1225502 CVE-2024-36012).
- Update
  patches.suse/Bluetooth-qca-add-missing-firmware-sanity-checks.patch
  (git-fixes bsc#1225722 CVE-2024-36880).
- Update
  patches.suse/Bluetooth-qca-fix-firmware-check-error-path.patch
  (git-fixes CVE-2024-36942).
- Update
  patches.suse/Bluetooth-qca-fix-info-leak-when-fetching-fw-build-i.patch
  (git-fixes bsc#1225720 CVE-2024-36032).
- Update
  patches.suse/KVM-x86-mmu-Write-protect-L2-SPTEs-in-TDP-MMU-when-c.patch
  (git-fixes bsc#1223749 CVE-2024-26990).
- Update
  patches.suse/KVM-x86-pmu-Disable-support-for-adaptive-PEBS.patch
  (git-fixes bsc#1223692 CVE-2024-26992).
- Update
  patches.suse/Reapply-drm-qxl-simplify-qxl_fence_wait.patch
  (stable-fixes CVE-2024-36944).
- Update
  patches.suse/USB-core-Fix-access-violation-during-port-device-rem.patch
  (git-fixes bsc#1225734 CVE-2024-36896).
- Update
  patches.suse/amd-amdkfd-sync-all-devices-to-wait-all-processes-be.patch
  (stable-fixes CVE-2024-36949).
- Update patches.suse/bpf-Check-bloom-filter-map-value-size.patch
  (bsc#1224488 CVE-2024-35905 bsc#1225766 CVE-2024-36918).
- Update
  patches.suse/clk-sunxi-ng-h6-Reparent-CPUX-during-PLL-CPUX-rate-c.patch
  (git-fixes bsc#1225692 CVE-2023-52882).
- Update
  patches.suse/cxl-pci-Fix-disabling-memory-if-DVSEC-CXL-Range-does.patch
  (git-fixes CVE-2024-26761).
- Update
  patches.suse/drm-amd-display-Atom-Integrated-System-Info-v2_2-for.patch
  (stable-fixes bsc#1225735 CVE-2024-36897).
- Update
  patches.suse/drm-amd-pm-fixes-a-random-hang-in-S4-for-SMU-v13.0.4.patch
  (stable-fixes bsc#1225705 CVE-2024-36026).
- Update
  patches.suse/drm-amdkfd-range-check-cp-bad-op-exception-interrupt.patch
  (stable-fixes CVE-2024-36951).
- Update
  patches.suse/drm-arm-malidp-fix-a-possible-null-pointer-dereferen.patch
  (git-fixes bsc#1225593 CVE-2024-36014).
- Update
  patches.suse/drm-nouveau-firmware-Fix-SG_DEBUG-error-with-nvkm_fi.patch
  (stable-fixes bsc#1225728 CVE-2024-36885).
- Update
  patches.suse/efi-unaccepted-touch-soft-lockup-during-memory-accept.patch
  (git-fixes bsc#1225773 CVE-2024-36936).
- Update
  patches.suse/firewire-ohci-mask-bus-reset-interrupts-between-ISR-.patch
  (stable-fixes CVE-2024-36950).
- Update patches.suse/gpiolib-cdev-fix-uninitialised-kfifo.patch
  (git-fixes bsc#1225736 CVE-2024-36898).
- Update
  patches.suse/i40e-fix-vf-may-be-used-uninitialized-in-this-functi.patch
  (git-fixes bsc#1225698 CVE-2024-36020).
- Update
  patches.suse/maple_tree-fix-mas_empty_area_rev-null-pointer-deref.patch
  (git-fixes bsc#1225710 CVE-2024-36891).
- Update
  patches.suse/mm-slab-make-__free-kfree-accept-error-pointers.patch
  (git-fixes bsc#1225714 CVE-2024-36890).
- Update
  patches.suse/mmc-sdhci-msm-pervent-access-to-suspended-controller.patch
  (git-fixes bsc#1225708 CVE-2024-36029).
- Update
  patches.suse/net-hns3-fix-kernel-crash-when-devlink-reload-during.patch
  (git-fixes bsc#1225699 CVE-2024-36021).
- Update
  patches.suse/nouveau-dmem-handle-kcalloc-allocation-failure.patch
  (git-fixes CVE-2024-26943).
- Update
  patches.suse/nouveau-uvmm-fix-addr-range-calcs-for-remap-operatio.patch
  (git-fixes bsc#1225694 CVE-2024-36018).
- Update
  patches.suse/pinctrl-core-delete-incorrect-free-in-pinctrl_enable.patch
  (git-fixes CVE-2024-36940).
- Update
  patches.suse/pinctrl-devicetree-fix-refcount-leak-in-pinctrl_dt_t.patch
  (git-fixes CVE-2024-36959).
- Update
  patches.suse/ppdev-Add-an-error-check-in-register_device.patch
  (git-fixes bsc#1225640 CVE-2024-36015).
- Update patches.suse/qibfs-fix-dentry-leak.patch (git-fixes
  CVE-2024-36947).
- Update
  patches.suse/regmap-maple-Fix-cache-corruption-in-regcache_maple_.patch
  (git-fixes bsc#1225695 CVE-2024-36019).
- Update
  patches.suse/s390-cio-Ensure-the-copied-buf-is-NUL-terminated.patch
  (git-fixes bsc#1223869 bsc#1225747 CVE-2024-36931).
- Update
  patches.suse/s390-qeth-Fix-kernel-panic-after-setting-hsuid.patch
  (git-fixes bsc#1223874 bsc#1225775 CVE-2024-36928).
- Update
  patches.suse/scsi-qla2xxx-Fix-off-by-one-in-qla_edif_app_getstats.patch
  (git-fixes bsc#1225704 CVE-2024-36025).
- Update
  patches.suse/spi-fix-null-pointer-dereference-within-spi_sync.patch
  (git-fixes CVE-2024-36930).
- Update
  patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  (bsc#1224331 bsc#1224602 CVE-2024-35814).
- Update
  patches.suse/tty-n_gsm-fix-possible-out-of-bounds-in-gsm0_receive.patch
  (git-fixes bsc#1225642 CVE-2024-36016).
- Update
  patches.suse/usb-gadget-f_fs-Fix-race-between-aio_cancel-and-AIO-.patch
  (git-fixes bsc#1225749 CVE-2024-36894).
- Update
  patches.suse/usb-gadget-uvc-use-correct-buffer-size-when-parsing-.patch
  (git-fixes bsc#1225750 CVE-2024-36895).
- Update
  patches.suse/usb-typec-tcpm-Check-for-port-partner-validity-befor.patch
  (git-fixes bsc#1225748 CVE-2024-36893).
- Update
  patches.suse/wifi-iwlwifi-mvm-guard-against-invalid-STA-ID-on-rem.patch
  (stable-fixes bsc#1225769 CVE-2024-36921).
- Update
  patches.suse/wifi-iwlwifi-read-txq-read_ptr-under-lock.patch
  (stable-fixes CVE-2024-36922).
- Update
  patches.suse/wifi-nl80211-don-t-free-NULL-coalescing-rule.patch
  (git-fixes CVE-2024-36941).
- Update
  patches.suse/x86-efistub-Call-mixed-mode-boot-services-on-the-firmware-.patch
  (git-fixes bsc#1224742 CVE-2024-35803).
- commit 539780f</changelog>
  <changelog author="dwagner@suse.de" date="1717416007">- nvmet: fix ns enable/disable possible hang (git-fixes).
- nvme-multipath: fix io accounting on failover (git-fixes).
- nvme: fix multipath batched completion accounting (git-fixes).
- commit ed3b392</changelog>
  <changelog author="dwagner@suse.de" date="1717416008">- scsi: lpfc: Copyright updates for 14.4.0.2 patches
  (bsc#1225842).
- scsi: lpfc: Update lpfc version to 14.4.0.2 (bsc#1225842).
- scsi: lpfc: Add support for 32 byte CDBs (bsc#1225842).
- scsi: lpfc: Change lpfc_hba hba_flag member into a bitmask
  (bsc#1225842).
  Refresh:
  - patches.suse/lpfc-reintroduce-old-irq-probe-logic.patch
- scsi: lpfc: Introduce rrq_list_lock to protect active_rrq_list
  (bsc#1225842).
- scsi: lpfc: Clear deferred RSCN processing flag when driver
  is unloading (bsc#1225842).
- scsi: lpfc: Update logging of protection type for T10 DIF I/O
  (bsc#1225842).
- scsi: lpfc: Change default logging level for unsolicited CT
  MIB commands (bsc#1225842).
- commit 5a56384</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416009">- smb: client: fix mount when dns_resolver key is not available
  (git-fixes, bsc#1225172).
- commit 28edb5c</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416010">- cifs: fix leak of iface for primary channel (git-fixes,
  bsc#1225172).
- commit b7eb8e8</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416011">- Revert "cifs: reconnect work should have reference on server
  struct" (git-fixes, bsc#1225172).
- commit 3ca4c0c</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416012">- smb: client: fix parsing of SMB3.1.1 POSIX create context
  (git-fixes, bsc#1225172).
- commit 5f27f69</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416013">- cifs: failure to add channel on iface should bump up weight
  (git-fixes, bsc#1225172).
- commit 007b237</changelog>
  <changelog author="tonyj@suse.de" date="1717416014">- perf/x86: Fix out of range data (git-fixes).
- perf/x86/intel/ds: Don't clear -&gt;pebs_data_cfg for the last
  PEBS event (git-fixes).
- perf/x86/amd/lbr: Discard erroneous branch entries (git-fixes).
- commit 664d77f</changelog>
  <changelog author="dsterba@suse.com" date="1717588800">- blacklist.conf: remove fix for CVE-2024-35956 bsc#1224674, not applicable
- Delete patches.suse/btrfs-qgroup-fix-qgroup-prealloc-rsv-leak-in-subvolu.patch.
  Quoting bsc#1225945#c11:
  "So the upstream 6.5 kernel commit (1b53e51a4a8f ("btrfs: don't commit
  transaction for every subvol create")
  ) was never backported to SLE, so that fix eb96e221937a ("btrfs: fix
  unwritten extent buffer after snapshotting a new subvolume") was never
  backported."
- commit d947258</changelog>
  <changelog author="tonyj@suse.de" date="1717588801">- perf pmu: Count sys and cpuid JSON events separately (git
  fixes).
- perf stat: Don't display metric header for non-leader uncore
  events (git-fixes).
- perf daemon: Fix file leak in daemon_session__control
  (git-fixes).
- perf symbols: Fix ownership of string in dso__load_vmlinux()
  (git-fixes).
- perf thread: Fixes to thread__new() related to initializing comm
  (git-fixes).
- perf report: Avoid SEGV in report__setup_sample_type()
  (git-fixes).
- perf ui browser: Don't save pointer to stack memory (git-fixes).
- perf bench internals inject-build-id: Fix trap divide when
  collecting just one DSO (git-fixes).
- perf intel-pt: Fix unassigned instruction op (discovered by
  MemorySanitizer) (git-fixes).
- perf test shell arm_coresight: Increase buffer size for
  Coresight basic tests (git-fixes).
- perf docs: Document bpf event modifier (git-fixes).
- perf bench uprobe: Remove lib64 from libc.so.6 binary path
  (git-fixes).
- perf record: Fix debug message placement for test consumption
  (git-fixes).
- perf tests: Apply attributes to all events in object code
  reading test (git-fixes).
- perf tests: Make "test data symbol" more robust on Neoverse N1
  (git-fixes).
- perf annotate: Fix annotation_calc_lines() to pass correct
  address to get_srcline() (git-fixes).
- perf stat: Do not fail on metrics on s390 z/VM systems
  (git-fixes).
- perf sched timehist: Fix -g/--call-graph option failure
  (git-fixes).
- perf annotate: Get rid of duplicate --group option item
  (git-fixes).
- perf probe: Add missing libgen.h header needed for using
  basename() (git-fixes).
- perf record: Delete session after stopping sideband thread
  (git-fixes).
- perf auxtrace: Fix multiple use of --itrace option (git-fixes).
- perf script: Show also errors for --insn-trace option
  (git-fixes).
- perf lock contention: Add a missing NULL check (git-fixes).
- perf vendor events amd: Fix Zen 4 cache latency events
  (git-fixes).
- libperf evlist: Avoid out-of-bounds access (git-fixes).
- perf pmu: Fix a potential memory leak in perf_pmu__lookup()
  (git-fixes).
- perf print-events: make is_event_supported() more robust
  (git-fixes).
- perf list: fix short description for some cache events
  (git-fixes).
- perf metric: Don't remove scale from counts (git-fixes).
- perf stat: Avoid metric-only segv (git-fixes).
- perf expr: Fix "has_event" function for metric style events
  (git-fixes).
- perf srcline: Add missed addr2line closes (git-fixes).
- perf thread_map: Free strlist on normal path in
  thread_map__new_by_tid_str() (git-fixes).
- perf bpf: Clean up the generated/copied vmlinux.h (git-fixes).
- perf jevents: Drop or simplify small integer values (git-fixes).
- perf evsel: Fix duplicate initialization of data-&gt;id in
  evsel__parse_sample() (git-fixes).
- perf pmu: Treat the msr pmu as software (git-fixes).
- perf record: Check conflict between '--timestamp-filename'
  option and pipe mode before recording (git-fixes).
- perf record: Fix possible incorrect free in
  record__switch_output() (git-fixes).
- perf vendor events amd: Add Zen 4 memory controller events
  (git-fixes).
- perf top: Uniform the event name for the hybrid machine
  (git-fixes).
- perf top: Use evsel's cpus to replace user_requested_cpus
  (git-fixes).
- commit a1f9340</changelog>
  <changelog author="tonyj@suse.de" date="1717675200">- perf ui browser: Avoid SEGV on title (git fixes).
- commit 1578c22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717675201">- inet: inet_defrag: prevent sk release while still in use
  (CVE-2024-26921 bsc#1223138).
- commit 2016faf</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717675202">- net: preserve kabi for sk_buff (CVE-2024-26921 bsc#1223138).
- commit 7bf5961</changelog>
</package>
<package pkgid="9d25650fb9b39373180ef03939986086bf8f726c8f47661afec6adeefa03bf86" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150600.8.5.4"/>
  <changelog author="mkubecek@suse.cz" date="1717416000">- series.conf: cleanup
  Fix subsection header to silence series_insert error.
- commit 4628dc3</changelog>
  <changelog author="mkubecek@suse.cz" date="1717416001">- netfilter: nf_tables: release mutex after nft_gc_seq_end from
  abort path (CVE-2024-26925 bsc#1223390).
- commit 578a709</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717416002">- Add reference to L3 bsc#1225765 in BPF control flow graph and precision backtrack fixes (bsc#1225756)
  The L3 bsc#1225765 was created seperately since our customer requires
  PTF.
- Update patches.suse/bpf-fix-precision-backtracking-instruction-iteration.patch
- Update patches.suse/bpf-handle-ldimm64-properly-in-check_cfg.patch
- Update patches.suse/selftests-bpf-add-edge-case-backtracking-logic-test.patch
- Update patches.suse/selftests-bpf-precision-tracking-test-for-BPF_NEG-an.patch
- commit 054635e</changelog>
  <changelog author="msuchanek@suse.de" date="1717416003">- powerpc/uaccess: Use YZ asm constraint for ld (bsc#1194869).
- powerpc/uaccess: Fix build errors seen with GCC 13/14
  (bsc#1194869).
- commit 46b5d84</changelog>
  <changelog author="msuchanek@suse.de" date="1717416004">- blacklist.conf: PPC fsl_msi is not used
- commit ae6590d</changelog>
  <changelog author="msuchanek@suse.de" date="1717416005">- powerpc/pseries/lparcfg: drop error message from guest name
  lookup (bsc#1187716 ltc#193451 git-fixes).
- commit ceab637</changelog>
  <changelog author="mfranc@suse.cz" date="1717416006">- Update
  patches.suse/ALSA-hda-intel-sdw-acpi-fix-usage-of-device_get_name.patch
  (git-fixes CVE-2024-36955).
- Update
  patches.suse/ARM-9381-1-kasan-clear-stale-stack-poison.patch
  (git-fixes bsc#1225715 CVE-2024-36906).
- Update
  patches.suse/Bluetooth-HCI-Fix-potential-null-ptr-deref.patch
  (git-fixes bsc#1225579 CVE-2024-36011).
- Update
  patches.suse/Bluetooth-L2CAP-Fix-slab-use-after-free-in-l2cap_con.patch
  (git-fixes bsc#1225578 CVE-2024-36013).
- Update
  patches.suse/Bluetooth-msft-fix-slab-use-after-free-in-msft_do_cl.patch
  (git-fixes bsc#1225502 CVE-2024-36012).
- Update
  patches.suse/Bluetooth-qca-add-missing-firmware-sanity-checks.patch
  (git-fixes bsc#1225722 CVE-2024-36880).
- Update
  patches.suse/Bluetooth-qca-fix-firmware-check-error-path.patch
  (git-fixes CVE-2024-36942).
- Update
  patches.suse/Bluetooth-qca-fix-info-leak-when-fetching-fw-build-i.patch
  (git-fixes bsc#1225720 CVE-2024-36032).
- Update
  patches.suse/KVM-x86-mmu-Write-protect-L2-SPTEs-in-TDP-MMU-when-c.patch
  (git-fixes bsc#1223749 CVE-2024-26990).
- Update
  patches.suse/KVM-x86-pmu-Disable-support-for-adaptive-PEBS.patch
  (git-fixes bsc#1223692 CVE-2024-26992).
- Update
  patches.suse/Reapply-drm-qxl-simplify-qxl_fence_wait.patch
  (stable-fixes CVE-2024-36944).
- Update
  patches.suse/USB-core-Fix-access-violation-during-port-device-rem.patch
  (git-fixes bsc#1225734 CVE-2024-36896).
- Update
  patches.suse/amd-amdkfd-sync-all-devices-to-wait-all-processes-be.patch
  (stable-fixes CVE-2024-36949).
- Update patches.suse/bpf-Check-bloom-filter-map-value-size.patch
  (bsc#1224488 CVE-2024-35905 bsc#1225766 CVE-2024-36918).
- Update
  patches.suse/clk-sunxi-ng-h6-Reparent-CPUX-during-PLL-CPUX-rate-c.patch
  (git-fixes bsc#1225692 CVE-2023-52882).
- Update
  patches.suse/cxl-pci-Fix-disabling-memory-if-DVSEC-CXL-Range-does.patch
  (git-fixes CVE-2024-26761).
- Update
  patches.suse/drm-amd-display-Atom-Integrated-System-Info-v2_2-for.patch
  (stable-fixes bsc#1225735 CVE-2024-36897).
- Update
  patches.suse/drm-amd-pm-fixes-a-random-hang-in-S4-for-SMU-v13.0.4.patch
  (stable-fixes bsc#1225705 CVE-2024-36026).
- Update
  patches.suse/drm-amdkfd-range-check-cp-bad-op-exception-interrupt.patch
  (stable-fixes CVE-2024-36951).
- Update
  patches.suse/drm-arm-malidp-fix-a-possible-null-pointer-dereferen.patch
  (git-fixes bsc#1225593 CVE-2024-36014).
- Update
  patches.suse/drm-nouveau-firmware-Fix-SG_DEBUG-error-with-nvkm_fi.patch
  (stable-fixes bsc#1225728 CVE-2024-36885).
- Update
  patches.suse/efi-unaccepted-touch-soft-lockup-during-memory-accept.patch
  (git-fixes bsc#1225773 CVE-2024-36936).
- Update
  patches.suse/firewire-ohci-mask-bus-reset-interrupts-between-ISR-.patch
  (stable-fixes CVE-2024-36950).
- Update patches.suse/gpiolib-cdev-fix-uninitialised-kfifo.patch
  (git-fixes bsc#1225736 CVE-2024-36898).
- Update
  patches.suse/i40e-fix-vf-may-be-used-uninitialized-in-this-functi.patch
  (git-fixes bsc#1225698 CVE-2024-36020).
- Update
  patches.suse/maple_tree-fix-mas_empty_area_rev-null-pointer-deref.patch
  (git-fixes bsc#1225710 CVE-2024-36891).
- Update
  patches.suse/mm-slab-make-__free-kfree-accept-error-pointers.patch
  (git-fixes bsc#1225714 CVE-2024-36890).
- Update
  patches.suse/mmc-sdhci-msm-pervent-access-to-suspended-controller.patch
  (git-fixes bsc#1225708 CVE-2024-36029).
- Update
  patches.suse/net-hns3-fix-kernel-crash-when-devlink-reload-during.patch
  (git-fixes bsc#1225699 CVE-2024-36021).
- Update
  patches.suse/nouveau-dmem-handle-kcalloc-allocation-failure.patch
  (git-fixes CVE-2024-26943).
- Update
  patches.suse/nouveau-uvmm-fix-addr-range-calcs-for-remap-operatio.patch
  (git-fixes bsc#1225694 CVE-2024-36018).
- Update
  patches.suse/pinctrl-core-delete-incorrect-free-in-pinctrl_enable.patch
  (git-fixes CVE-2024-36940).
- Update
  patches.suse/pinctrl-devicetree-fix-refcount-leak-in-pinctrl_dt_t.patch
  (git-fixes CVE-2024-36959).
- Update
  patches.suse/ppdev-Add-an-error-check-in-register_device.patch
  (git-fixes bsc#1225640 CVE-2024-36015).
- Update patches.suse/qibfs-fix-dentry-leak.patch (git-fixes
  CVE-2024-36947).
- Update
  patches.suse/regmap-maple-Fix-cache-corruption-in-regcache_maple_.patch
  (git-fixes bsc#1225695 CVE-2024-36019).
- Update
  patches.suse/s390-cio-Ensure-the-copied-buf-is-NUL-terminated.patch
  (git-fixes bsc#1223869 bsc#1225747 CVE-2024-36931).
- Update
  patches.suse/s390-qeth-Fix-kernel-panic-after-setting-hsuid.patch
  (git-fixes bsc#1223874 bsc#1225775 CVE-2024-36928).
- Update
  patches.suse/scsi-qla2xxx-Fix-off-by-one-in-qla_edif_app_getstats.patch
  (git-fixes bsc#1225704 CVE-2024-36025).
- Update
  patches.suse/spi-fix-null-pointer-dereference-within-spi_sync.patch
  (git-fixes CVE-2024-36930).
- Update
  patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  (bsc#1224331 bsc#1224602 CVE-2024-35814).
- Update
  patches.suse/tty-n_gsm-fix-possible-out-of-bounds-in-gsm0_receive.patch
  (git-fixes bsc#1225642 CVE-2024-36016).
- Update
  patches.suse/usb-gadget-f_fs-Fix-race-between-aio_cancel-and-AIO-.patch
  (git-fixes bsc#1225749 CVE-2024-36894).
- Update
  patches.suse/usb-gadget-uvc-use-correct-buffer-size-when-parsing-.patch
  (git-fixes bsc#1225750 CVE-2024-36895).
- Update
  patches.suse/usb-typec-tcpm-Check-for-port-partner-validity-befor.patch
  (git-fixes bsc#1225748 CVE-2024-36893).
- Update
  patches.suse/wifi-iwlwifi-mvm-guard-against-invalid-STA-ID-on-rem.patch
  (stable-fixes bsc#1225769 CVE-2024-36921).
- Update
  patches.suse/wifi-iwlwifi-read-txq-read_ptr-under-lock.patch
  (stable-fixes CVE-2024-36922).
- Update
  patches.suse/wifi-nl80211-don-t-free-NULL-coalescing-rule.patch
  (git-fixes CVE-2024-36941).
- Update
  patches.suse/x86-efistub-Call-mixed-mode-boot-services-on-the-firmware-.patch
  (git-fixes bsc#1224742 CVE-2024-35803).
- commit 539780f</changelog>
  <changelog author="dwagner@suse.de" date="1717416007">- nvmet: fix ns enable/disable possible hang (git-fixes).
- nvme-multipath: fix io accounting on failover (git-fixes).
- nvme: fix multipath batched completion accounting (git-fixes).
- commit ed3b392</changelog>
  <changelog author="dwagner@suse.de" date="1717416008">- scsi: lpfc: Copyright updates for 14.4.0.2 patches
  (bsc#1225842).
- scsi: lpfc: Update lpfc version to 14.4.0.2 (bsc#1225842).
- scsi: lpfc: Add support for 32 byte CDBs (bsc#1225842).
- scsi: lpfc: Change lpfc_hba hba_flag member into a bitmask
  (bsc#1225842).
  Refresh:
  - patches.suse/lpfc-reintroduce-old-irq-probe-logic.patch
- scsi: lpfc: Introduce rrq_list_lock to protect active_rrq_list
  (bsc#1225842).
- scsi: lpfc: Clear deferred RSCN processing flag when driver
  is unloading (bsc#1225842).
- scsi: lpfc: Update logging of protection type for T10 DIF I/O
  (bsc#1225842).
- scsi: lpfc: Change default logging level for unsolicited CT
  MIB commands (bsc#1225842).
- commit 5a56384</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416009">- smb: client: fix mount when dns_resolver key is not available
  (git-fixes, bsc#1225172).
- commit 28edb5c</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416010">- cifs: fix leak of iface for primary channel (git-fixes,
  bsc#1225172).
- commit b7eb8e8</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416011">- Revert "cifs: reconnect work should have reference on server
  struct" (git-fixes, bsc#1225172).
- commit 3ca4c0c</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416012">- smb: client: fix parsing of SMB3.1.1 POSIX create context
  (git-fixes, bsc#1225172).
- commit 5f27f69</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416013">- cifs: failure to add channel on iface should bump up weight
  (git-fixes, bsc#1225172).
- commit 007b237</changelog>
  <changelog author="tonyj@suse.de" date="1717416014">- perf/x86: Fix out of range data (git-fixes).
- perf/x86/intel/ds: Don't clear -&gt;pebs_data_cfg for the last
  PEBS event (git-fixes).
- perf/x86/amd/lbr: Discard erroneous branch entries (git-fixes).
- commit 664d77f</changelog>
  <changelog author="dsterba@suse.com" date="1717588800">- blacklist.conf: remove fix for CVE-2024-35956 bsc#1224674, not applicable
- Delete patches.suse/btrfs-qgroup-fix-qgroup-prealloc-rsv-leak-in-subvolu.patch.
  Quoting bsc#1225945#c11:
  "So the upstream 6.5 kernel commit (1b53e51a4a8f ("btrfs: don't commit
  transaction for every subvol create")
  ) was never backported to SLE, so that fix eb96e221937a ("btrfs: fix
  unwritten extent buffer after snapshotting a new subvolume") was never
  backported."
- commit d947258</changelog>
  <changelog author="tonyj@suse.de" date="1717588801">- perf pmu: Count sys and cpuid JSON events separately (git
  fixes).
- perf stat: Don't display metric header for non-leader uncore
  events (git-fixes).
- perf daemon: Fix file leak in daemon_session__control
  (git-fixes).
- perf symbols: Fix ownership of string in dso__load_vmlinux()
  (git-fixes).
- perf thread: Fixes to thread__new() related to initializing comm
  (git-fixes).
- perf report: Avoid SEGV in report__setup_sample_type()
  (git-fixes).
- perf ui browser: Don't save pointer to stack memory (git-fixes).
- perf bench internals inject-build-id: Fix trap divide when
  collecting just one DSO (git-fixes).
- perf intel-pt: Fix unassigned instruction op (discovered by
  MemorySanitizer) (git-fixes).
- perf test shell arm_coresight: Increase buffer size for
  Coresight basic tests (git-fixes).
- perf docs: Document bpf event modifier (git-fixes).
- perf bench uprobe: Remove lib64 from libc.so.6 binary path
  (git-fixes).
- perf record: Fix debug message placement for test consumption
  (git-fixes).
- perf tests: Apply attributes to all events in object code
  reading test (git-fixes).
- perf tests: Make "test data symbol" more robust on Neoverse N1
  (git-fixes).
- perf annotate: Fix annotation_calc_lines() to pass correct
  address to get_srcline() (git-fixes).
- perf stat: Do not fail on metrics on s390 z/VM systems
  (git-fixes).
- perf sched timehist: Fix -g/--call-graph option failure
  (git-fixes).
- perf annotate: Get rid of duplicate --group option item
  (git-fixes).
- perf probe: Add missing libgen.h header needed for using
  basename() (git-fixes).
- perf record: Delete session after stopping sideband thread
  (git-fixes).
- perf auxtrace: Fix multiple use of --itrace option (git-fixes).
- perf script: Show also errors for --insn-trace option
  (git-fixes).
- perf lock contention: Add a missing NULL check (git-fixes).
- perf vendor events amd: Fix Zen 4 cache latency events
  (git-fixes).
- libperf evlist: Avoid out-of-bounds access (git-fixes).
- perf pmu: Fix a potential memory leak in perf_pmu__lookup()
  (git-fixes).
- perf print-events: make is_event_supported() more robust
  (git-fixes).
- perf list: fix short description for some cache events
  (git-fixes).
- perf metric: Don't remove scale from counts (git-fixes).
- perf stat: Avoid metric-only segv (git-fixes).
- perf expr: Fix "has_event" function for metric style events
  (git-fixes).
- perf srcline: Add missed addr2line closes (git-fixes).
- perf thread_map: Free strlist on normal path in
  thread_map__new_by_tid_str() (git-fixes).
- perf bpf: Clean up the generated/copied vmlinux.h (git-fixes).
- perf jevents: Drop or simplify small integer values (git-fixes).
- perf evsel: Fix duplicate initialization of data-&gt;id in
  evsel__parse_sample() (git-fixes).
- perf pmu: Treat the msr pmu as software (git-fixes).
- perf record: Check conflict between '--timestamp-filename'
  option and pipe mode before recording (git-fixes).
- perf record: Fix possible incorrect free in
  record__switch_output() (git-fixes).
- perf vendor events amd: Add Zen 4 memory controller events
  (git-fixes).
- perf top: Uniform the event name for the hybrid machine
  (git-fixes).
- perf top: Use evsel's cpus to replace user_requested_cpus
  (git-fixes).
- commit a1f9340</changelog>
  <changelog author="tonyj@suse.de" date="1717675200">- perf ui browser: Avoid SEGV on title (git fixes).
- commit 1578c22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717675201">- inet: inet_defrag: prevent sk release while still in use
  (CVE-2024-26921 bsc#1223138).
- commit 2016faf</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717675202">- net: preserve kabi for sk_buff (CVE-2024-26921 bsc#1223138).
- commit 7bf5961</changelog>
</package>
<package pkgid="a84a176799b0950900816901c0d84544b82fea79d484ac1f0d1a67b6d6cf6f67" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="634511ca53b8244a50b9946c5ce5e452668a3797b728cbbf0b7af2d1551f3d5d" name="containerd" arch="ppc64le">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="ebbc04a4ef6a808e87408e2bc31c3ad6db639e61972609e718003a024c8a32d9" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="439a1bf8606e0d62e2af6c2a21fdbadf1aef19a1f5a3229625115f51fba422ab" name="containerd" arch="src">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="64adbd9395d3373ebb983aaa8ca93af8287bf2e63c96f13a1af3dffa396942dc" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="5d40a1300e892966b47a3f9eafcbf00619f65bbfa65ad0e462a65f9417cd24d2" name="containerd-ctr" arch="aarch64">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="8e36bf274f0897236c9bd210ec5455284651282cdceb461253606390946a4263" name="containerd-ctr" arch="ppc64le">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="686bc8eccc674be5cd44c594793a809a0151536e51f507f02982cb8773a46551" name="containerd-ctr" arch="s390x">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="f1df2a2a686088dd1d244d513a38930cc7050889b1f1f2d203f8b186918bc696" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="dae1b74fab8e7ad522c5e8c3f3a43abded96de131f450f123222637058ead6a7" name="containerd-devel" arch="noarch">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="58b4d08018e53d2b4dd83769c1671be5eedd195aa66f27a36288d379120ea09a" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.58.0" rel="150600.3.3.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.56.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.56.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697803200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
</package>
<package pkgid="bff8480946306fa0e9a1b723bc605f21b168b4bcd3a5385d656511f4fd2135a4" name="containerized-data-importer-api" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150600.3.3.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.56.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.56.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697803200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
</package>
<package pkgid="665258b356378bbceb516fc9a92c4224b76eb8418b6f7477a8aa4bfec8a39467" name="containerized-data-importer-cloner" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150600.3.3.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.56.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.56.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697803200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
</package>
<package pkgid="62c0ea03652142c20c8bffda1ae4a446bbb76bc2903f62d45113c499eb5ed8a9" name="containerized-data-importer-controller" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150600.3.3.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.56.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.56.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697803200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
</package>
<package pkgid="4d352b99be95ab32649e3289d7c68e6c5d14aa5fae5dea13cc4490763875eb81" name="containerized-data-importer-importer" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150600.3.3.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.56.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.56.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697803200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
</package>
<package pkgid="f192dfd92d329365a4c5effc155d85de7ed72bf6598b50830c1158748e709b76" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150600.3.3.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.56.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.56.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697803200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
</package>
<package pkgid="f04e4b02a78a23ba76930e9f46302a9a39cba1f02c97831813c3d8d2c4ea01b4" name="containerized-data-importer-operator" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150600.3.3.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.56.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.56.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697803200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
</package>
<package pkgid="081bfd650e644db1feda2bf4e007d1500105b389dde57215116608066ad33ed5" name="containerized-data-importer-uploadproxy" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150600.3.3.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.56.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.56.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697803200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
</package>
<package pkgid="2ef72eb1e41349f5a7df070bbb7376b1f3e71274c610e7ca19062af1443c7a9c" name="containerized-data-importer-uploadserver" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150600.3.3.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.56.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.56.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697803200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
</package>
<package pkgid="6e588d986f5396f61e522d7ced6f4756e23036a2a1844abf197c2187ad420e0d" name="coreutils" arch="aarch64">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="a2d28b60870c8f3eb326a331deb8a2b9fa85f93487a881e5deb941be7e17dc94" name="coreutils" arch="ppc64le">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="f926e9b97d825bf362bab843b9cf5755c011aa25dbc6822394fab8413b731010" name="coreutils" arch="s390x">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="f81cc4e0f5ea5f5de70095456a020b275b59c0161cf4644e9a889361e5e17290" name="coreutils" arch="src">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="e22285e41ab6361c1368ecbacea6be3ca9fae0947af4abebf73d5a876c47693d" name="coreutils" arch="x86_64">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="eebd3022420daad6fe67c24d067245041c6ae5c114012a62b5aa899642cca44b" name="coreutils-doc" arch="noarch">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="85f0d634a0b7d8dee6715ce0c082bed64b521eb5f1f5e9fa58700c3374505f8f" name="coreutils-lang" arch="noarch">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="f56447ea35e347f59115af9420d1d56f9de6f84ec0b3d8a21d411a78c07ab99f" name="coreutils-single" arch="aarch64">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="586995cce5e556fa93f3cd8960fe69ea9cb0307d703132595cdcb2aa9988efc4" name="coreutils-single" arch="ppc64le">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="b9873aeb8487f07ff0ce0cd9283d785cd43c9b731c239b8a796fc47b69109471" name="coreutils-single" arch="s390x">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="819a2198c0518e5e7ce8671fe8ab012d2b14859e725d0745201f768e95ff211b" name="coreutils-single" arch="src">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="dbe912da068f380e27793ea573b06ed9709e1cdf01de373a19aa098b742301ee" name="coreutils-single" arch="x86_64">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="95684706fe9ec050dfac3cc502b05cd707ebc323019d47c49e6156041a525668" name="coreutils-testsuite" arch="aarch64">
  <version epoch="0" ver="8.32" rel="150400.9.6.2"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="f3ab1a0a03283bc58a2c6c5a6243c5ab146c5d46faca8026c84e646e711aac34" name="coreutils-testsuite" arch="ppc64le">
  <version epoch="0" ver="8.32" rel="150400.9.6.2"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="5d11f44f15557facd039aa48521abf1d44ba10e54511720fcc212faf835c5b23" name="coreutils-testsuite" arch="s390x">
  <version epoch="0" ver="8.32" rel="150400.9.6.2"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="f46e941536a3b0c74107d72acef2c6376005b66cc30de95578b53ac19436dee6" name="coreutils-testsuite" arch="src">
  <version epoch="0" ver="8.32" rel="150400.9.6.2"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="404d0ef6e67d6a331faf2baca9833b81327fd5d08fbf07ca91b0ece618836011" name="coreutils-testsuite" arch="x86_64">
  <version epoch="0" ver="8.32" rel="150400.9.6.2"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="1ad387e7e8b745240d818fe598ab48fe4fcc9d2852adf3060365bfc487090a0b" name="cosign" arch="aarch64">
  <version epoch="0" ver="2.2.4" rel="150400.3.20.1"/>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
</package>
<package pkgid="caee9168cb35b78902f676eedea6dd249fd2ce02feda37266e56cd9cdb31430e" name="cosign" arch="ppc64le">
  <version epoch="0" ver="2.2.4" rel="150400.3.20.1"/>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
</package>
<package pkgid="5591f0bbe03138b048990892860dc910829d71019afba24a504d61b0ac58653b" name="cosign" arch="s390x">
  <version epoch="0" ver="2.2.4" rel="150400.3.20.1"/>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
</package>
<package pkgid="4e54c2aafc3b5c069f03a59a2b1278eb3c2c4d81c3417ed8f223f4507ed5b5d9" name="cosign" arch="src">
  <version epoch="0" ver="2.2.4" rel="150400.3.20.1"/>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
</package>
<package pkgid="f2736e9e0da8d050b2ebac20f34e36a194aa4bef0cd94ae9bdb296cfb8857170" name="cosign" arch="x86_64">
  <version epoch="0" ver="2.2.4" rel="150400.3.20.1"/>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
</package>
<package pkgid="520fca36804cbd45e3e38fca641b2ffbba49cacaded4b11ac88367979776d2c1" name="cpp13" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="35728c311cd95db4cb670f52cb57d8f9f974a231c1c3ec852d97e397be81ba03" name="cpp13" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="e7c117a6eab0f0e63553b5368e73037d7e1288ac7f2bbfc528f2fe33f3fa0362" name="cpp13" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="23793fc326af26bead6ea07fa005e15e4c7763987b1eecdbfc0e36f35119b30f" name="cpp13" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="da745510418c4dd620ad37075604b1907f320a5135c6f89e544471e88b3e4e77" name="cross-aarch64-gcc13-bootstrap" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="5f1cc8e3378e9bf1c461f0edd6965b3c4c27b270a5e6ab65eb10364526a08fa5" name="cross-aarch64-gcc13-bootstrap" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="83b741a0004632e20d9689d877630b849f718220b04f9c05e11b43b7ff080964" name="cross-aarch64-gcc13-bootstrap" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="6a714112f49b8a7446ddd30b1037195bd0c262b03807c6581b38f2b0094ff44b" name="cross-aarch64-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="d68adf394fcc86e410171eee62e212c73d696176bba824e7baf1d94aff523c2a" name="cross-arm-gcc13" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="8101e85503519fa251ffc120b87b2a63032b8dcd491b89f9b710505cdb2db98f" name="cross-arm-gcc13" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="9581c492c3342d2be87c8e18ec212541a35a6459d607e3b7ddceb45619fa3163" name="cross-arm-gcc13" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="abe4ffb2425f726ab605083f864b4b292c4e0ae6aba0fafd184ce79e5916c81c" name="cross-arm-gcc13" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="1beb84cb1c4491f83f31376fcd7ef2aa51592b94203674e3274467d6c3a6b3a7" name="cross-arm-gcc13" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="36e7ec3d887b04356095f5bdc20157ff44163a76d451739d65ce2b788a6ffa64" name="cross-arm-gcc13-icecream-backend" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="e6e241c69d3eba6995ee9d0cc7aa249a638398f69baece0654634d8960970dea" name="cross-arm-gcc13-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c623d8d1850b6d3b84ec44cf433f11adaf85e7a6377d3d9de024164a2ad485c8" name="cross-arm-gcc13-icecream-backend" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="6fff722eb7fe4e6c5a1e578acebf061b9c6e1fd3e7231c0e97a8354ad06246d7" name="cross-arm-gcc13-icecream-backend" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="6ab50bb57920801c722b3f95d04412d3e7c8b320e96f270d3a314d4c239301fd" name="cross-arm-none-gcc13-bootstrap" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="3aae686cf726245a70276d40847ed53f67fa4a7f698cc092ac1882373abc58cd" name="cross-arm-none-gcc13-bootstrap" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="8b2c679a36f8a51eb23ac9d3d09c735c46c9c3f4e39d8a94105e3bdf16f7041a" name="cross-arm-none-gcc13-bootstrap" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="03e973729b99bae1a65af6b2c94b9a6283fc87cf2845f81a2cc3d5617b823c0e" name="cross-arm-none-gcc13-bootstrap" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c8e8388bf380fc204e76ed44985d09576853df6e2f2e9b6b28d12154aa504e30" name="cross-arm-none-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="70ae8816db56e30a5b0b15ad001c2a979949cc69830eb0448f47f56108f66e25" name="cross-avr-gcc13-bootstrap" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="9cf83ed316da0372f41910c51c85ab45bdb9da3c73e68d65d64a855648a24268" name="cross-avr-gcc13-bootstrap" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="5310e23c4488c256eddd886320a38de7d5897e2a1369fbaab52ba51033b6770d" name="cross-avr-gcc13-bootstrap" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="4be177b241ec9d5d6e0b5378d7171698dafaafa9987d95178ef622fb08ea5217" name="cross-avr-gcc13-bootstrap" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b9512cca7573f8c282e3f357b258a80dd0bd1e5f2bbd7ac19d215ff39843cef7" name="cross-avr-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="4af5493a4ed66994ecf7fbe65f820ca7ba3a12f473735f580a2789bf7442c1e1" name="cross-bpf-gcc13" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="7a4d99cd5e1b02a49dd877482d0bfba9531f83076cf687f914ff318a64fc81cf" name="cross-bpf-gcc13" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="e3deeafadf28f758575cc68c7a5574800a0eabde0c30d6be7bcd4a9034bc3de0" name="cross-bpf-gcc13" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="7241c337a60490078b03df301e2efe2a1a5189211774a1bdf5d6d3c633f06d14" name="cross-bpf-gcc13" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c401938f6994fb8abaeeee53ae2f64ba015b426bcc0af17cdbbcee79fa595ef8" name="cross-bpf-gcc13" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="ce8cf9d0753ecf30ee9d4ece4384d0d06bf3f3e78a3e5c505397757febc4faf3" name="cross-epiphany-gcc13-bootstrap" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="77599774004c0da220b0a90e91f67576fb756ac2cc50b2b71cec712b0c804521" name="cross-epiphany-gcc13-bootstrap" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b49fe9d9e50ed8f744995e76fddb9e6603a4b19f40dc59dc7c2c3325526d510e" name="cross-epiphany-gcc13-bootstrap" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c6194cae2daa667a0c6c91fadc751f1341a0340d736e79f0de1809faf32e80b7" name="cross-epiphany-gcc13-bootstrap" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="50737fe4bef31408986fd5a917da9c0375efda5b22e08b2146e96e788b59b677" name="cross-epiphany-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="dadd79cd61286589447059a58ab542aa48e581346ff039f7ceaa46e80d723724" name="cross-hppa-gcc13" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="d3113dfc695d2b01e02da8a4bbcb5aee4534f9a1de479e0451f2b246ff456192" name="cross-hppa-gcc13" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="9362099fa3ad84019d9665ce5cdf7a271e82cc71cf03835e3ed603deb4e401f4" name="cross-hppa-gcc13" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="259806670c427358cc5f60461d2e419a6d17d9042b1c7ec6e40af64b6c673832" name="cross-hppa-gcc13" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="dfac256499bfd7bc5aaedb9f8485e2b7f98c63813a1504ac20939f4700c5d3c0" name="cross-hppa-gcc13" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="465d2b670cc655037f363857e8417ae564844d29849b8eb80305c8f0790c77f3" name="cross-hppa-gcc13-bootstrap" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="8d02832a12df50b8e540f2c36219e0f8be3f0f540b0294cd5d9d2bd0e64520fb" name="cross-hppa-gcc13-bootstrap" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="7fbd3d3e9699f7957244948ba7bc09376397a30e3389580b3c58d7167236d221" name="cross-hppa-gcc13-bootstrap" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="974280d8e056bf800fe23096da1e56c5416c11d01d5b925e8302e850259af2e4" name="cross-hppa-gcc13-bootstrap" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="2b7859c4589e940357bc118f7a57055f024ff92605a704895896023fc7f9d634" name="cross-hppa-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="111525c662944c042a67c108f80609c87b98a0f479f6c8dbe3ef52dae5f869a1" name="cross-hppa-gcc13-icecream-backend" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="8fcb30b4c191cb258cdb2f0e32d2df1880dbf9223a22769b1de173d4480fc492" name="cross-hppa-gcc13-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b6cee3896dff98d92240cbcb55226b0c8f17d8995629397b37669c91add7f493" name="cross-hppa-gcc13-icecream-backend" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="f52169a2dc9736afc8952a0218ce7ddc3b29fac16fdd06d8760d16b43dc1f897" name="cross-hppa-gcc13-icecream-backend" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="a774a30ca5c8b88da2d7364477544ba36674d4983d15ff39a83d4fb6bf18c782" name="cross-m68k-gcc13" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c412f004275cc22979b585ae6d18496ffafd4abe6f6fe827aa1b3b45b59c7a53" name="cross-m68k-gcc13" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="360eac21e4137cc57a8388c96471dc319f7d4344ad7443165207cc6856e3adca" name="cross-m68k-gcc13" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="176b80b400f668bca4f33d8bbdb9bd5554e5b84933108458d33d58238a74331c" name="cross-m68k-gcc13" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="9fe06f88bfb29a172a24798bf06de9ef3178dcc097c7ea7064138d52f15bb76c" name="cross-m68k-gcc13" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b7eae6c0b5649b8fc25906bd68fd534a7ebb3704965e58b21e30e330296c20e9" name="cross-m68k-gcc13-icecream-backend" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="153c1432541ecc7e8d3b9b5ccfb0419e85e85be6e579dbb29fe23f9abfe6f925" name="cross-m68k-gcc13-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="df068127ca8965cb5d261af52cad05dcec9e5bff8719a43c0c2ccec9231247bb" name="cross-m68k-gcc13-icecream-backend" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="78f7b55f71bad19c42aa47a6a6ea53c717e9ee4a3f19d2f1af591bcea627124e" name="cross-m68k-gcc13-icecream-backend" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="4dc0dca34d3683152901b127af087ab767cfc4370a1cb2db1fbe0090b63e8f27" name="cross-mips-gcc13" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="61b6fa3cb40a42114f88127d3b43ecab40d1b1dd1ad7f255925a5e085944440f" name="cross-mips-gcc13" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="f736a4c8356e10f403399051c6ea22dfc9feeb16138ba1c5c85725da8133b443" name="cross-mips-gcc13" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="dbd32179bf22cae9bff0f60eb825d7436190fb5362b1f37e842ccd863f8d2dc3" name="cross-mips-gcc13" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c796b284b086d6b402806950d546516cf38c33b9b9def38cce886bcc67e4d800" name="cross-mips-gcc13" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b9f6e7fc4fc23893c43cc3668e10dfa1a6f7bdecb68edd249b78b6cc0e3d4836" name="cross-mips-gcc13-icecream-backend" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="4fea795eb35468fff15e9e66e3af444485b76b939c43470ea35033789c667906" name="cross-mips-gcc13-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="d5b1c8e2a9a02f4d1244c7c0ad5d0acac424c46efd475861874d14870b72f4ee" name="cross-mips-gcc13-icecream-backend" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="91a89ba59dc1560cd68bbc7e2e88fb8572936e47d81467a8e73c080b7bd1165a" name="cross-mips-gcc13-icecream-backend" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="8755c334cc7619f942d80d43cdeaa772c9038e8e2db57eb27102c928035b6b5c" name="cross-nvptx-gcc13" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="cfba4817195fedc4fec50e187274a5ae27bcb8ced735cc35559843bba72941ed" name="cross-nvptx-gcc13" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="d1b4b490dae789c105eeb0b823d4dac9fb969daff8489ef73639f33a4f0581e0" name="cross-nvptx-newlib13-devel" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="7407f02058ca7768c0c67ee8859e939766fbe4560008352e7c055d317bc90108" name="cross-ppc64-gcc13" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="a052d047ef305fe514e1fcd8c07165d353c2cd24b2ac97c6d99eeceb0579265a" name="cross-ppc64-gcc13" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="3a9aee53f11830576a9cc7c792e2300e0e9b59e462ad08811e63bd8f6598e9ab" name="cross-ppc64-gcc13" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="fa1b4774415cb2e2b9067195e6eae770b8b9e5139ff574363bf6d834e8b287ef" name="cross-ppc64-gcc13" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="8a1baed52548e344ec32b297d5273ab90f4b7b7d75d37c3505f79219c6e7c7db" name="cross-ppc64-gcc13" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="477e9133825046ae296053daf416d005c4ef99ea6370f9fe107e9a6a3ed1c433" name="cross-ppc64-gcc13-icecream-backend" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="5c2c8b8e77ea0183a4a190d3bac204d8110c2bafed4b890183c0a0127d9cafca" name="cross-ppc64-gcc13-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="1df79455fe00250fb405f56ee89b51947d8696ee3df0c782f7758b2964501712" name="cross-ppc64-gcc13-icecream-backend" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="80fd840f544c810f457b01f56ecd1ab86be69cc65d2b7643a538bcff8a6e3a44" name="cross-ppc64-gcc13-icecream-backend" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="941dc8ab0ac4d1063e0183b0a4d3d9b06cd32bb4bf9c9bf09733a35e24a2ac28" name="cross-ppc64le-gcc13-bootstrap" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="d647c4313db7f34ca0676ecf9c33a386dde6005904d9842dba43f44feb881472" name="cross-ppc64le-gcc13-bootstrap" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="da0dcb32e1d2869df06374280b6aeedd83b460e5a9c961f6fa76d577689b11b3" name="cross-ppc64le-gcc13-bootstrap" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="952a079b29f8df134fc6b127525eb1e54065e8af2a43ce62283cabfac75a48bd" name="cross-ppc64le-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="7a7f25c2a7541414273fc45edfa6a30d403b71a712fcc7126a286f8d373ab2b2" name="cross-pru-gcc13-bootstrap" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="715cd1c5a1f432cfabc2248ff75efe0d3acd875542cedbe5217a61f201662b4a" name="cross-pru-gcc13-bootstrap" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="a0058dd756a0da84c879294e29432673e243d4ed8849886b97030901aa80b095" name="cross-pru-gcc13-bootstrap" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c585f582fdd8c3a4f0512f77892f8c4548e6f196f6bd32814bc44469d3378fb4" name="cross-pru-gcc13-bootstrap" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="ff92f6c2a48cfda0e4522c610f93e4f401384c168c1ab6df66cb2b80ca544dce" name="cross-pru-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="f7cdd9fc3edbe0cf326870ed45e74de36493bdb4a1fef325d5f4aba66c50d634" name="cross-riscv64-elf-gcc13-bootstrap" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="2c5b47d586d148957a802754b99a8762dc6895f338f2d14588cd09705e5056ab" name="cross-riscv64-elf-gcc13-bootstrap" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="4864085035a65cad15bdec4f0237b9d56fa7c6740437ecd8b2d1fca331737cde" name="cross-riscv64-elf-gcc13-bootstrap" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="1717f7b42df0085a22fa99f7738dc8c0773692d3652e4689cac2be238fff280b" name="cross-riscv64-elf-gcc13-bootstrap" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="ef9c4a993bddcbabc8d8987c4d071807051e7e98a1867aa0a99c64a1d2b8d4b2" name="cross-riscv64-elf-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="0538a34fab8710bcb6e9e91e074c0671d1d8c53400e2660d00f679f68b3867f0" name="cross-riscv64-gcc13-bootstrap" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c037a8953e6021459f312db256695af2cba5e111e3cbde4aa152529c9b6b8b5d" name="cross-riscv64-gcc13-bootstrap" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="602214ed7db01c74f152a0ae81f96e10028f47cdfb063c37495a36664693ba7e" name="cross-riscv64-gcc13-bootstrap" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="95d4abc1e3546267e7125043fd5153d0826b910768859bf13df714f41a168859" name="cross-riscv64-gcc13-bootstrap" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="5ccb65c25cf1cb6811c0843fdc561302bd631e005467f8a2bd3b82e83d91db30" name="cross-riscv64-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b8f3f2f6b5ed19dd5bf54020021a6e4ae0fcbc3e2523a1f9292484dae6e98a35" name="cross-rx-gcc13-bootstrap" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="bde497f0e9ddee4466b8c85d14ada66a07243aef78a091c689a4afbda4ecd888" name="cross-rx-gcc13-bootstrap" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="46b99e8fde6264afd83ea5eee7f70c1bd5cdb0bcb5934b8f87b7150529af3bac" name="cross-rx-gcc13-bootstrap" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="6924f7f9f68c7157acf73c90619c8136a61584914185d49f09de353b34318218" name="cross-rx-gcc13-bootstrap" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="14db3fdc24f70d99469ebdf6400ef351db5ff5ac9f6859650e49be1659c402b3" name="cross-rx-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="0ecb61b113f7f69f07a28857f7f2900047ac601a1c932b84f4ef8008a733e078" name="cross-s390x-gcc13-bootstrap" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="2c279028374a1181f31a55191f0709a0d32ed84a56c08d5de9518c1d72951cb4" name="cross-s390x-gcc13-bootstrap" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="1b1d6f7120b1e34d0b375787d49728c2ecf37e06eba0c216c37d5c3ebd535b3f" name="cross-s390x-gcc13-bootstrap" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="f1a5b01b1496e2292f016238d52760ee16a9fdeaf98173b49877d1a856edd46f" name="cross-s390x-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b1f1c68da1f552d9bbc3b1779324052e5abb96b5e8982ce19a4da3804ffddacc" name="cross-sparc-gcc13" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="bfe5d1ee525eabfba365b3e84b855810d6cccda4a938736537be0ad27a5fbb82" name="cross-sparc-gcc13" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="763c16d19a4da6767a451f497918f4a2e6e3cd09c5fa7729c069af643615c045" name="cross-sparc-gcc13" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="0da9cd763ab0a143ace6057a5cc4f4cf602de4ccdf70c62c79a759c625a2c2e8" name="cross-sparc-gcc13" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c4db9227574d51b54cd02c670300f35a33853bdfe31360f7128299cc795abb4b" name="cross-sparc-gcc13" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="76f92bb68788d26e3231ddbe83bcff8da4a7c41da4978a9d98d8a1b68d7aec62" name="cross-sparc64-gcc13" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b9db908e2e6e7838968167957cfe8f4500b1e33a0e6ed9f3fa5ec7a463e798fe" name="cross-sparc64-gcc13" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="76c51f10c1b69e17ced7f6649c24bbbefce5dfde6558922cdac9ff256ddd97a4" name="cross-sparc64-gcc13" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="7e7a3cff6a84f9583980db3baea9f450250c5b13c4144e89538de9cf34d3f1fe" name="cross-sparc64-gcc13" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="04d5046a37c2f7dfe0f83c6671a95a319969d4a14f640650beb3ec056a1da0df" name="cross-sparc64-gcc13" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="0de90d46accf4b8f4b97ebc78cf0df336e4508a052532049411d532c60c1b570" name="cross-sparc64-gcc13-icecream-backend" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="727ae6fc9e835b07b4d156d7cdedb4794436df203a486c3713b27f541b0566be" name="cross-sparc64-gcc13-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="948064ea5654320ed316cbab14b6a14f8937230247ad016b3d9cc2f70e75e6c8" name="cross-sparc64-gcc13-icecream-backend" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b5a6f4fe000963503dc2adef3c441580e5d447148058980f4cf8a24343a6fffa" name="cross-sparc64-gcc13-icecream-backend" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="1f560fed1b9a88b044b4605c718822d97c2fde75013e901575b2c0a959ecd8f4" name="cross-sparcv9-gcc13-icecream-backend" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="43ae41c8a5fbc53c4b7855aa0f75d29a1d87a16d7dda50c19b7b880ec309cdb7" name="cross-sparcv9-gcc13-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c661dab8833a30393238c9ceedc5561a77b63848ad6e095e9c757497de8560e4" name="cross-sparcv9-gcc13-icecream-backend" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="ca00239125348e1f7f988794d9101ba05dc64dc8c62c0f0b42514f87189ef0f2" name="cross-sparcv9-gcc13-icecream-backend" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="4bf149037be0c2170282c0ee71170689677e34631e54e698712f8ce1f43582a3" name="cross-x86_64-gcc13" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="959a0d5fc540c99aa9509704d0550894db66851643000264e305ee49f81b8631" name="cross-x86_64-gcc13" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="fcbd2349ca2253a154e3b2ecd78ef05ff6a48ba0af24c3e5d3f22e9ebb498e2b" name="cross-x86_64-gcc13" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c0d155268a8025d43fdddd6cb5246ec3f10b78b1b6d8ffb10fab63a615966346" name="cross-x86_64-gcc13" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="9c0c482a6d91be377e739cfd0748b2a78e4021795a395c7c60326d7e0457f465" name="cross-x86_64-gcc13-icecream-backend" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b55a316240e4e55613874feb7a62474e5290d55f086d9374b7a7a4a51adf6da2" name="cross-x86_64-gcc13-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="bc09ca90e517596dae39e84b1dd51056e71103ee4fb260534433a5ca2a223e50" name="cross-x86_64-gcc13-icecream-backend" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="82f9ad143f3c50d7d34b822f1ca9346c7069465bb4b42aacf476fb09fd8cccc2" name="csp-billing-adapter" arch="src">
  <version epoch="0" ver="0.10.0" rel="150400.9.14.1"/>
  <changelog author="sean.marlow@suse.com" date="1687953600">- Update to version v0.3.0
  + Add new exception type
  + Improved initial metering test exception handling
- Update to version 0.2.0
  + Split up `create_csp_config` into smaller components.
- Update to version 0.1.1
  + Fix retry on exception in the meter billing test.
  + Fix the timestamp in meter billing test call. This is
    a datetime object not a string timestamp.
- Update to version 0.1.0
  + Wait one cycle at startup before checking usage data
  + Dry run metering against API at startup
  + Sleep only for remainder of cycle to account for processing time.
  + Handle multiple errors using error list
  + Use cache and csp config in memory
  + Pass in now timestamp instead of re-generating
  + Save config map and cache once at end of loop
  + Add base product to csp config
  + Add timestamps to log messages
  + Add retry mechanism for functions that may fail randomly
- Update to version 0.0.2
  + Handle no matching dimension found for volume billing
  + Only load testing support plugins in unit tests
  + Add additional logging to core paths
  + Add Initial exception handling
- initial build</changelog>
  <changelog author="rjschwei@suse.com" date="1688385600">- Update to version 0.3.1
  + Add -service subpackage
  + systemd enablement to run the code as a daemon in a VM</changelog>
  <changelog author="sean.marlow@suse.com" date="1690891200">- Update to version 0.4.0
  + Handle status dictionary from meter billing and legacy string response.
  + Implement supported for tiered consumption reporting.</changelog>
  <changelog author="jesus.bv@suse.com" date="1692360000">- Fix python3-csp-billing-adapter dependency for service</changelog>
  <changelog author="rjschwei@suse.com" date="1692360001">- Update to version 0.5.0
  + Integrate log handling and log configuration</changelog>
  <changelog author="jesus.bv@suse.com" date="1695038400">- Update to version 0.6.0
  Update message when records list is empty
  Only sleep at initial deployment
  Skip invalid records
  Log format variables on a const</changelog>
  <changelog author="sean.marlow@suse.com" date="1695211200">- Update to version 0.7.0:
  * Add get version hook spec</changelog>
  <changelog author="sean.marlow@suse.com" date="1697457600">- Update to version 0.8.0:
  * Clear billing status with an empty dictionary</changelog>
  <changelog author="sean.marlow@suse.com" date="1705665600">- Update to version 0.9.0:
  * Add metering archive feature</changelog>
  <changelog author="sean.marlow@suse.com" date="1713873600">- Update to version 0.10.0:
  * Add free trial feature</changelog>
</package>
<package pkgid="d19332d84fe25e772f02223a08d52c9e7534dfa31d6905ac5e239379029af05b" name="csp-billing-adapter-service" arch="noarch">
  <version epoch="0" ver="0.10.0" rel="150400.9.14.1"/>
  <changelog author="sean.marlow@suse.com" date="1687953600">- Update to version v0.3.0
  + Add new exception type
  + Improved initial metering test exception handling
- Update to version 0.2.0
  + Split up `create_csp_config` into smaller components.
- Update to version 0.1.1
  + Fix retry on exception in the meter billing test.
  + Fix the timestamp in meter billing test call. This is
    a datetime object not a string timestamp.
- Update to version 0.1.0
  + Wait one cycle at startup before checking usage data
  + Dry run metering against API at startup
  + Sleep only for remainder of cycle to account for processing time.
  + Handle multiple errors using error list
  + Use cache and csp config in memory
  + Pass in now timestamp instead of re-generating
  + Save config map and cache once at end of loop
  + Add base product to csp config
  + Add timestamps to log messages
  + Add retry mechanism for functions that may fail randomly
- Update to version 0.0.2
  + Handle no matching dimension found for volume billing
  + Only load testing support plugins in unit tests
  + Add additional logging to core paths
  + Add Initial exception handling
- initial build</changelog>
  <changelog author="rjschwei@suse.com" date="1688385600">- Update to version 0.3.1
  + Add -service subpackage
  + systemd enablement to run the code as a daemon in a VM</changelog>
  <changelog author="sean.marlow@suse.com" date="1690891200">- Update to version 0.4.0
  + Handle status dictionary from meter billing and legacy string response.
  + Implement supported for tiered consumption reporting.</changelog>
  <changelog author="jesus.bv@suse.com" date="1692360000">- Fix python3-csp-billing-adapter dependency for service</changelog>
  <changelog author="rjschwei@suse.com" date="1692360001">- Update to version 0.5.0
  + Integrate log handling and log configuration</changelog>
  <changelog author="jesus.bv@suse.com" date="1695038400">- Update to version 0.6.0
  Update message when records list is empty
  Only sleep at initial deployment
  Skip invalid records
  Log format variables on a const</changelog>
  <changelog author="sean.marlow@suse.com" date="1695211200">- Update to version 0.7.0:
  * Add get version hook spec</changelog>
  <changelog author="sean.marlow@suse.com" date="1697457600">- Update to version 0.8.0:
  * Clear billing status with an empty dictionary</changelog>
  <changelog author="sean.marlow@suse.com" date="1705665600">- Update to version 0.9.0:
  * Add metering archive feature</changelog>
  <changelog author="sean.marlow@suse.com" date="1713873600">- Update to version 0.10.0:
  * Add free trial feature</changelog>
</package>
<package pkgid="cab13ddbdb179cda7f2a87228265aac44c38bdf072166923a9a2b030fa8a684c" name="cups" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="abbeb8d64c6540b7c80cd8ccb2deacb222f7d34e46e4db6a09f234c90e5c5c68" name="cups" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="90d0e164c24bcb13905a4231f3c9d7ecbb823b6dc9db5c7fcaf7a9a1c225a122" name="cups" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="f15dc1bc53615d90177635645d45f2f5b9e9afd7168760ff3e554a4ce58ab83d" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="4c45d1354ef7f62d5e44b7404a9edbff6ba9ff667feccc410e8415f274add14a" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="14c73dbdcfd91034391f21e0ad3b471037a7b4562a4e6d489edf8a9328ff4608" name="cups-client" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="07261d231461794784124f4eccb3e0e59f26f2468853291c959ca2ef0a8c617f" name="cups-client" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="548c3f1c0f221219691dde1c95e26d44bfe5219fac0d5f048744fae1d8e2d67c" name="cups-client" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="2dfb8cc2bdd2b71d55b590ab76fbce8960ba4d9411ef2f0148dbaeff84573e6f" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="af16e93da1941e5201a4d1f96ced71272fb05dd6e458e0e786442f34dbfa7b11" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="85615fc634a2f973081396265521de4012cf2dc137fd7396738aec798a4cbe25" name="cups-config" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="5a849ee56e6cf9885b31916838c6e6cb87d2b08c4ca7a5b92424cfd40417493d" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="b057017f02db924ac7c9377191ff2588574938273d5533daf8e17f2238e8d501" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="ffa6adca6805ecffa1686f53cc6363da8cef73279782b292166b79b8b01f6578" name="cups-ddk" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="e5c2cf612b0b5c0e34b02d28721274a12d3b78231d03d35adbe03edb07c50360" name="cups-ddk" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="6af6d19379fdf92969298fc0deb7977cb9c7ba41e4d0d57b5b5c370eb4bc8449" name="cups-ddk" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="72c3b499fc2eb8f7dc21064b683412b5924f7a000bf8ea843ea97ec0aeca0773" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="59358ceb4292ba463aade6e469578968b17f69e4d503bd074ee1c0ca44ae0402" name="cups-devel" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="1b16d648edbb95bf5f7a5d4f0d6eed7d9cafdee06954c3e0e3774759ddc02a77" name="cups-devel" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="278dd2dcb079d4218b45c2b048627e879c85c5923986398b29f720ce88a84d02" name="cups-devel" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="dd55c0e31227341aabdcaef9f661e958a4a77897bda05acfcc0c6057e9b2f2cc" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="619967f1743076a1f96572d7a6245e4ef4acb53f1e49d7d7816641be24a1e32f" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="08aaedc563d30c61fd088e7f19c4fe7461faedeafa50275c02473adbfd199774" name="desktop-data-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="150000.4.3.11"/>
  <changelog author="coolo@suse.com" date="1366804800">- bump version to 13.1</changelog>
  <changelog author="coolo@suse.com" date="1378123200">- remove supplements and move it to the patterns. Supplements
  are rather intransparent</changelog>
  <changelog author="fcrozat@suse.com" date="1392638400">- Initial package for SLE, based on openSUSE version.</changelog>
  <changelog author="alarrosa@suse.com" date="1455710400">- Upgrade package from upstream sources
  (commit 78d352e589c4867e4c66e6e48f31b86de861db9f).
  * Add package_edutainment.png icon which is used by
  Yast's software management module as Education package group icon
  (bnc#953027)
  * Remove package-manager.desktop, yast2-packager now provides
  yast2-packager.desktop which handles rpm files again
- Remove the update_rpm script and replace it with a proper
  obs source service (disabled by default). Use xz compression
  instead of bz2.
- Update the spec file accordingly.</changelog>
  <changelog author="UTC - qzhao@suse.com" date="1455796800">- Disable "Novell" branding in wallpaper, FATE# 320506 Disable
  "Novell" branding in wallpaper</changelog>
  <changelog author="qzhao@suse.com" date="1504612800">- Update desktop-data-SLE.spec: Correct a path error on removing
  curvy2.png to accomplish FATE#320506 completely(bsc#1058231).</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- Version update for SLE15.</changelog>
  <changelog author="rbrown@suse.com" date="1517227200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fcrozat@suse.com" date="1517227201">- Remove very old obsoletes/provides.
- Kill %%post code for migrating from KDE3.
- Remove calls to icon_theme_cache macros, this is handled by
  file-triggers now.</changelog>
  <changelog author="mgorse@suse.com" date="1712577600">- Fix typo in the desktop files for some of the wallpapers
  (bsc#1222146).</changelog>
</package>
<package pkgid="4d60af3f78a1a12c4a4629a7f4e681c034cb270367f0174b022d4cef50d6d175" name="desktop-data-SLE" arch="src">
  <version epoch="0" ver="15" rel="150000.4.3.11"/>
  <changelog author="vuntz@opensuse.org" date="1316606400">- Update openSUSE-default-static.xml to reference the new filename
  for default wallpapers.</changelog>
  <changelog author="coolo@suse.com" date="1316692800">- wallpaper moved out of here, so require it</changelog>
  <changelog author="vuntz@opensuse.org" date="1316692801">- Drop the bits related to creating the XML file used by GNOME for
  the default wallpaper, including the alternatives handling. This
  all moves to branding-openSUSE now.</changelog>
  <changelog author="vuntz@opensuse.org" date="1317038400">- Remove update-alternatives Requires(post)/Requires(postun) since
  we don't use this anymore (moved to wallpaper-branding-openSUSE).</changelog>
  <changelog author="vuntz@opensuse.org" date="1318334400">- Add back Hidden.directory and a mention of it in
  applications.menu to help KDE 3 (bnc#686786).
- Drop hidden-fix.diff: the updated fix is now in git.</changelog>
  <changelog author="coolo@suse.com" date="1318939200">- desktop-data is fine with any wallpaper branding for 12.1</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- bump version to 12.2</changelog>
  <changelog author="coolo@suse.com" date="1355140800">- bump version to 12.3</changelog>
  <changelog author="wstephenson@suse.com" date="1358769600">- Update for changes to XDG menu spec (bnc#443364):
  * Edutainment is now two top level menus, Education and Science
  * All additional categories allowed for Education are now
    permitted for Science
  * Monitor additional category is permitted for System and Network
  * Spirituality, Maps, Feed, NetworkService, Shooter additional
    categories were added</changelog>
  <changelog author="wstephenson@suse.com" date="1359460800">- Fix Audio players show up in Video Player submenun (bnc#788628)
- Fix application menu schema warning from kbuildsycoca (bnc#789456)</changelog>
  <changelog author="coolo@suse.com" date="1366804800">- bump version to 13.1</changelog>
  <changelog author="coolo@suse.com" date="1378123200">- remove supplements and move it to the patterns. Supplements
  are rather intransparent</changelog>
  <changelog author="fcrozat@suse.com" date="1392638400">- Initial package for SLE, based on openSUSE version.</changelog>
  <changelog author="alarrosa@suse.com" date="1455710400">- Upgrade package from upstream sources
  (commit 78d352e589c4867e4c66e6e48f31b86de861db9f).
  * Add package_edutainment.png icon which is used by
  Yast's software management module as Education package group icon
  (bnc#953027)
  * Remove package-manager.desktop, yast2-packager now provides
  yast2-packager.desktop which handles rpm files again
- Remove the update_rpm script and replace it with a proper
  obs source service (disabled by default). Use xz compression
  instead of bz2.
- Update the spec file accordingly.</changelog>
  <changelog author="UTC - qzhao@suse.com" date="1455796800">- Disable "Novell" branding in wallpaper, FATE# 320506 Disable
  "Novell" branding in wallpaper</changelog>
  <changelog author="qzhao@suse.com" date="1504612800">- Update desktop-data-SLE.spec: Correct a path error on removing
  curvy2.png to accomplish FATE#320506 completely(bsc#1058231).</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- Version update for SLE15.</changelog>
  <changelog author="rbrown@suse.com" date="1517227200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fcrozat@suse.com" date="1517227201">- Remove very old obsoletes/provides.
- Kill %%post code for migrating from KDE3.
- Remove calls to icon_theme_cache macros, this is handled by
  file-triggers now.</changelog>
  <changelog author="mgorse@suse.com" date="1712577600">- Fix typo in the desktop files for some of the wallpapers
  (bsc#1222146).</changelog>
</package>
<package pkgid="6a3449ede84ee667baaebffb8e195f4d9c609034aa9835a41bcee08fbf7ae579" name="desktop-data-SLE-extra" arch="noarch">
  <version epoch="0" ver="15" rel="150000.4.3.11"/>
  <changelog author="coolo@suse.com" date="1366804800">- bump version to 13.1</changelog>
  <changelog author="coolo@suse.com" date="1378123200">- remove supplements and move it to the patterns. Supplements
  are rather intransparent</changelog>
  <changelog author="fcrozat@suse.com" date="1392638400">- Initial package for SLE, based on openSUSE version.</changelog>
  <changelog author="alarrosa@suse.com" date="1455710400">- Upgrade package from upstream sources
  (commit 78d352e589c4867e4c66e6e48f31b86de861db9f).
  * Add package_edutainment.png icon which is used by
  Yast's software management module as Education package group icon
  (bnc#953027)
  * Remove package-manager.desktop, yast2-packager now provides
  yast2-packager.desktop which handles rpm files again
- Remove the update_rpm script and replace it with a proper
  obs source service (disabled by default). Use xz compression
  instead of bz2.
- Update the spec file accordingly.</changelog>
  <changelog author="UTC - qzhao@suse.com" date="1455796800">- Disable "Novell" branding in wallpaper, FATE# 320506 Disable
  "Novell" branding in wallpaper</changelog>
  <changelog author="qzhao@suse.com" date="1504612800">- Update desktop-data-SLE.spec: Correct a path error on removing
  curvy2.png to accomplish FATE#320506 completely(bsc#1058231).</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- Version update for SLE15.</changelog>
  <changelog author="rbrown@suse.com" date="1517227200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fcrozat@suse.com" date="1517227201">- Remove very old obsoletes/provides.
- Kill %%post code for migrating from KDE3.
- Remove calls to icon_theme_cache macros, this is handled by
  file-triggers now.</changelog>
  <changelog author="mgorse@suse.com" date="1712577600">- Fix typo in the desktop files for some of the wallpapers
  (bsc#1222146).</changelog>
</package>
<package pkgid="45de15b70f7bc4317c51baa5eb07937d0399e6ba96dd593cdf797beb6501ff46" name="dhcp-tools" arch="aarch64">
  <version epoch="0" ver="1.6" rel="150000.3.3.2"/>
  <changelog author="poeml@suse.de" date="998654400">- update dhcpdump to 1.2 and dhcping to 1.1</changelog>
  <changelog author="poeml@suse.de" date="1059048000">- update dhcpdump to 1.5. Rephrased changelog:
  - better input checking regarding validity of the header of the UDP packet
  - Added some DHCP options from the INIA website (not all are parsed yet)
  - added chaddr filter, contributed by Peter Apian-Bennewitz
  - client-identifier is now printed as long as it is.
  - autoconfiscated
- update dhcping to 1.2 (no significant changes)
- install CHANGES and other accompanying files
- use %defattr
- re-create man pages</changelog>
  <changelog author="poeml@suse.de" date="1078315200">- update dhcpdump to 1.5
  - Option 82, submitted by Phil Pennock &lt;pdp@nl.demon.net&gt;
  - Add fflush(), submitted by Gary Colman &lt;gary@colmans.net&gt;
  - Fix problem with padding, they were not handled properly
    and caused old memory to be reused.
- compile with -fno-strict-aliasing</changelog>
  <changelog author="poeml@suse.de" date="1084190400">- fix parsing of IP header for output of tcpdump-3.8.1 [#38528]</changelog>
  <changelog author="poeml@suse.de" date="1094731200">- fix parsing of IP header and data packages for output of
  tcpdump-3.8.[23] [#44946], and apply the fix on 9.2 or newer
- apply previous patch on 9.1 or newer</changelog>
  <changelog author="dmueller@suse.de" date="1128513600">- add norootforbuild</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="varkoly@suse.com" date="1709726400">- Adapt license</changelog>
</package>
<package pkgid="07765be7e4809913f22dce13453f2152d06ece3a9187fe0883a872bcd6880c4e" name="dhcp-tools" arch="ppc64le">
  <version epoch="0" ver="1.6" rel="150000.3.3.2"/>
  <changelog author="poeml@suse.de" date="998654400">- update dhcpdump to 1.2 and dhcping to 1.1</changelog>
  <changelog author="poeml@suse.de" date="1059048000">- update dhcpdump to 1.5. Rephrased changelog:
  - better input checking regarding validity of the header of the UDP packet
  - Added some DHCP options from the INIA website (not all are parsed yet)
  - added chaddr filter, contributed by Peter Apian-Bennewitz
  - client-identifier is now printed as long as it is.
  - autoconfiscated
- update dhcping to 1.2 (no significant changes)
- install CHANGES and other accompanying files
- use %defattr
- re-create man pages</changelog>
  <changelog author="poeml@suse.de" date="1078315200">- update dhcpdump to 1.5
  - Option 82, submitted by Phil Pennock &lt;pdp@nl.demon.net&gt;
  - Add fflush(), submitted by Gary Colman &lt;gary@colmans.net&gt;
  - Fix problem with padding, they were not handled properly
    and caused old memory to be reused.
- compile with -fno-strict-aliasing</changelog>
  <changelog author="poeml@suse.de" date="1084190400">- fix parsing of IP header for output of tcpdump-3.8.1 [#38528]</changelog>
  <changelog author="poeml@suse.de" date="1094731200">- fix parsing of IP header and data packages for output of
  tcpdump-3.8.[23] [#44946], and apply the fix on 9.2 or newer
- apply previous patch on 9.1 or newer</changelog>
  <changelog author="dmueller@suse.de" date="1128513600">- add norootforbuild</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="varkoly@suse.com" date="1709726400">- Adapt license</changelog>
</package>
<package pkgid="76ea91d86fc371fad2d11e1c058dcce2e6f2ff01d1d0733b5d39499146d8a889" name="dhcp-tools" arch="s390x">
  <version epoch="0" ver="1.6" rel="150000.3.3.2"/>
  <changelog author="poeml@suse.de" date="998654400">- update dhcpdump to 1.2 and dhcping to 1.1</changelog>
  <changelog author="poeml@suse.de" date="1059048000">- update dhcpdump to 1.5. Rephrased changelog:
  - better input checking regarding validity of the header of the UDP packet
  - Added some DHCP options from the INIA website (not all are parsed yet)
  - added chaddr filter, contributed by Peter Apian-Bennewitz
  - client-identifier is now printed as long as it is.
  - autoconfiscated
- update dhcping to 1.2 (no significant changes)
- install CHANGES and other accompanying files
- use %defattr
- re-create man pages</changelog>
  <changelog author="poeml@suse.de" date="1078315200">- update dhcpdump to 1.5
  - Option 82, submitted by Phil Pennock &lt;pdp@nl.demon.net&gt;
  - Add fflush(), submitted by Gary Colman &lt;gary@colmans.net&gt;
  - Fix problem with padding, they were not handled properly
    and caused old memory to be reused.
- compile with -fno-strict-aliasing</changelog>
  <changelog author="poeml@suse.de" date="1084190400">- fix parsing of IP header for output of tcpdump-3.8.1 [#38528]</changelog>
  <changelog author="poeml@suse.de" date="1094731200">- fix parsing of IP header and data packages for output of
  tcpdump-3.8.[23] [#44946], and apply the fix on 9.2 or newer
- apply previous patch on 9.1 or newer</changelog>
  <changelog author="dmueller@suse.de" date="1128513600">- add norootforbuild</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="varkoly@suse.com" date="1709726400">- Adapt license</changelog>
</package>
<package pkgid="a8694e0f389fe01e4a7976ea7d4056b0346587baf6cb1b38c05e9357ec592767" name="dhcp-tools" arch="src">
  <version epoch="0" ver="1.6" rel="150000.3.3.2"/>
  <changelog author="poeml@suse.de" date="985176000">- new package</changelog>
  <changelog author="poeml@suse.de" date="998654400">- update dhcpdump to 1.2 and dhcping to 1.1</changelog>
  <changelog author="poeml@suse.de" date="1059048000">- update dhcpdump to 1.5. Rephrased changelog:
  - better input checking regarding validity of the header of the UDP packet
  - Added some DHCP options from the INIA website (not all are parsed yet)
  - added chaddr filter, contributed by Peter Apian-Bennewitz
  - client-identifier is now printed as long as it is.
  - autoconfiscated
- update dhcping to 1.2 (no significant changes)
- install CHANGES and other accompanying files
- use %defattr
- re-create man pages</changelog>
  <changelog author="poeml@suse.de" date="1078315200">- update dhcpdump to 1.5
  - Option 82, submitted by Phil Pennock &lt;pdp@nl.demon.net&gt;
  - Add fflush(), submitted by Gary Colman &lt;gary@colmans.net&gt;
  - Fix problem with padding, they were not handled properly
    and caused old memory to be reused.
- compile with -fno-strict-aliasing</changelog>
  <changelog author="poeml@suse.de" date="1084190400">- fix parsing of IP header for output of tcpdump-3.8.1 [#38528]</changelog>
  <changelog author="poeml@suse.de" date="1094731200">- fix parsing of IP header and data packages for output of
  tcpdump-3.8.[23] [#44946], and apply the fix on 9.2 or newer
- apply previous patch on 9.1 or newer</changelog>
  <changelog author="dmueller@suse.de" date="1128513600">- add norootforbuild</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="varkoly@suse.com" date="1709726400">- Adapt license</changelog>
</package>
<package pkgid="2acad7449741a52acc95476af4a7002a774fa019cc98054ecfc6f3efb88d636a" name="dhcp-tools" arch="x86_64">
  <version epoch="0" ver="1.6" rel="150000.3.3.2"/>
  <changelog author="poeml@suse.de" date="998654400">- update dhcpdump to 1.2 and dhcping to 1.1</changelog>
  <changelog author="poeml@suse.de" date="1059048000">- update dhcpdump to 1.5. Rephrased changelog:
  - better input checking regarding validity of the header of the UDP packet
  - Added some DHCP options from the INIA website (not all are parsed yet)
  - added chaddr filter, contributed by Peter Apian-Bennewitz
  - client-identifier is now printed as long as it is.
  - autoconfiscated
- update dhcping to 1.2 (no significant changes)
- install CHANGES and other accompanying files
- use %defattr
- re-create man pages</changelog>
  <changelog author="poeml@suse.de" date="1078315200">- update dhcpdump to 1.5
  - Option 82, submitted by Phil Pennock &lt;pdp@nl.demon.net&gt;
  - Add fflush(), submitted by Gary Colman &lt;gary@colmans.net&gt;
  - Fix problem with padding, they were not handled properly
    and caused old memory to be reused.
- compile with -fno-strict-aliasing</changelog>
  <changelog author="poeml@suse.de" date="1084190400">- fix parsing of IP header for output of tcpdump-3.8.1 [#38528]</changelog>
  <changelog author="poeml@suse.de" date="1094731200">- fix parsing of IP header and data packages for output of
  tcpdump-3.8.[23] [#44946], and apply the fix on 9.2 or newer
- apply previous patch on 9.1 or newer</changelog>
  <changelog author="dmueller@suse.de" date="1128513600">- add norootforbuild</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="varkoly@suse.com" date="1709726400">- Adapt license</changelog>
</package>
<package pkgid="d6944a4b9ddc78510819bb163fc91dbcbec1076a412d183aec5b475cf5908294" name="dlm-kmp-azure" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150600.8.5.4"/>
  <changelog author="mkubecek@suse.cz" date="1717416000">- series.conf: cleanup
  Fix subsection header to silence series_insert error.
- commit 4628dc3</changelog>
  <changelog author="mkubecek@suse.cz" date="1717416001">- netfilter: nf_tables: release mutex after nft_gc_seq_end from
  abort path (CVE-2024-26925 bsc#1223390).
- commit 578a709</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717416002">- Add reference to L3 bsc#1225765 in BPF control flow graph and precision backtrack fixes (bsc#1225756)
  The L3 bsc#1225765 was created seperately since our customer requires
  PTF.
- Update patches.suse/bpf-fix-precision-backtracking-instruction-iteration.patch
- Update patches.suse/bpf-handle-ldimm64-properly-in-check_cfg.patch
- Update patches.suse/selftests-bpf-add-edge-case-backtracking-logic-test.patch
- Update patches.suse/selftests-bpf-precision-tracking-test-for-BPF_NEG-an.patch
- commit 054635e</changelog>
  <changelog author="msuchanek@suse.de" date="1717416003">- powerpc/uaccess: Use YZ asm constraint for ld (bsc#1194869).
- powerpc/uaccess: Fix build errors seen with GCC 13/14
  (bsc#1194869).
- commit 46b5d84</changelog>
  <changelog author="msuchanek@suse.de" date="1717416004">- blacklist.conf: PPC fsl_msi is not used
- commit ae6590d</changelog>
  <changelog author="msuchanek@suse.de" date="1717416005">- powerpc/pseries/lparcfg: drop error message from guest name
  lookup (bsc#1187716 ltc#193451 git-fixes).
- commit ceab637</changelog>
  <changelog author="mfranc@suse.cz" date="1717416006">- Update
  patches.suse/ALSA-hda-intel-sdw-acpi-fix-usage-of-device_get_name.patch
  (git-fixes CVE-2024-36955).
- Update
  patches.suse/ARM-9381-1-kasan-clear-stale-stack-poison.patch
  (git-fixes bsc#1225715 CVE-2024-36906).
- Update
  patches.suse/Bluetooth-HCI-Fix-potential-null-ptr-deref.patch
  (git-fixes bsc#1225579 CVE-2024-36011).
- Update
  patches.suse/Bluetooth-L2CAP-Fix-slab-use-after-free-in-l2cap_con.patch
  (git-fixes bsc#1225578 CVE-2024-36013).
- Update
  patches.suse/Bluetooth-msft-fix-slab-use-after-free-in-msft_do_cl.patch
  (git-fixes bsc#1225502 CVE-2024-36012).
- Update
  patches.suse/Bluetooth-qca-add-missing-firmware-sanity-checks.patch
  (git-fixes bsc#1225722 CVE-2024-36880).
- Update
  patches.suse/Bluetooth-qca-fix-firmware-check-error-path.patch
  (git-fixes CVE-2024-36942).
- Update
  patches.suse/Bluetooth-qca-fix-info-leak-when-fetching-fw-build-i.patch
  (git-fixes bsc#1225720 CVE-2024-36032).
- Update
  patches.suse/KVM-x86-mmu-Write-protect-L2-SPTEs-in-TDP-MMU-when-c.patch
  (git-fixes bsc#1223749 CVE-2024-26990).
- Update
  patches.suse/KVM-x86-pmu-Disable-support-for-adaptive-PEBS.patch
  (git-fixes bsc#1223692 CVE-2024-26992).
- Update
  patches.suse/Reapply-drm-qxl-simplify-qxl_fence_wait.patch
  (stable-fixes CVE-2024-36944).
- Update
  patches.suse/USB-core-Fix-access-violation-during-port-device-rem.patch
  (git-fixes bsc#1225734 CVE-2024-36896).
- Update
  patches.suse/amd-amdkfd-sync-all-devices-to-wait-all-processes-be.patch
  (stable-fixes CVE-2024-36949).
- Update patches.suse/bpf-Check-bloom-filter-map-value-size.patch
  (bsc#1224488 CVE-2024-35905 bsc#1225766 CVE-2024-36918).
- Update
  patches.suse/clk-sunxi-ng-h6-Reparent-CPUX-during-PLL-CPUX-rate-c.patch
  (git-fixes bsc#1225692 CVE-2023-52882).
- Update
  patches.suse/cxl-pci-Fix-disabling-memory-if-DVSEC-CXL-Range-does.patch
  (git-fixes CVE-2024-26761).
- Update
  patches.suse/drm-amd-display-Atom-Integrated-System-Info-v2_2-for.patch
  (stable-fixes bsc#1225735 CVE-2024-36897).
- Update
  patches.suse/drm-amd-pm-fixes-a-random-hang-in-S4-for-SMU-v13.0.4.patch
  (stable-fixes bsc#1225705 CVE-2024-36026).
- Update
  patches.suse/drm-amdkfd-range-check-cp-bad-op-exception-interrupt.patch
  (stable-fixes CVE-2024-36951).
- Update
  patches.suse/drm-arm-malidp-fix-a-possible-null-pointer-dereferen.patch
  (git-fixes bsc#1225593 CVE-2024-36014).
- Update
  patches.suse/drm-nouveau-firmware-Fix-SG_DEBUG-error-with-nvkm_fi.patch
  (stable-fixes bsc#1225728 CVE-2024-36885).
- Update
  patches.suse/efi-unaccepted-touch-soft-lockup-during-memory-accept.patch
  (git-fixes bsc#1225773 CVE-2024-36936).
- Update
  patches.suse/firewire-ohci-mask-bus-reset-interrupts-between-ISR-.patch
  (stable-fixes CVE-2024-36950).
- Update patches.suse/gpiolib-cdev-fix-uninitialised-kfifo.patch
  (git-fixes bsc#1225736 CVE-2024-36898).
- Update
  patches.suse/i40e-fix-vf-may-be-used-uninitialized-in-this-functi.patch
  (git-fixes bsc#1225698 CVE-2024-36020).
- Update
  patches.suse/maple_tree-fix-mas_empty_area_rev-null-pointer-deref.patch
  (git-fixes bsc#1225710 CVE-2024-36891).
- Update
  patches.suse/mm-slab-make-__free-kfree-accept-error-pointers.patch
  (git-fixes bsc#1225714 CVE-2024-36890).
- Update
  patches.suse/mmc-sdhci-msm-pervent-access-to-suspended-controller.patch
  (git-fixes bsc#1225708 CVE-2024-36029).
- Update
  patches.suse/net-hns3-fix-kernel-crash-when-devlink-reload-during.patch
  (git-fixes bsc#1225699 CVE-2024-36021).
- Update
  patches.suse/nouveau-dmem-handle-kcalloc-allocation-failure.patch
  (git-fixes CVE-2024-26943).
- Update
  patches.suse/nouveau-uvmm-fix-addr-range-calcs-for-remap-operatio.patch
  (git-fixes bsc#1225694 CVE-2024-36018).
- Update
  patches.suse/pinctrl-core-delete-incorrect-free-in-pinctrl_enable.patch
  (git-fixes CVE-2024-36940).
- Update
  patches.suse/pinctrl-devicetree-fix-refcount-leak-in-pinctrl_dt_t.patch
  (git-fixes CVE-2024-36959).
- Update
  patches.suse/ppdev-Add-an-error-check-in-register_device.patch
  (git-fixes bsc#1225640 CVE-2024-36015).
- Update patches.suse/qibfs-fix-dentry-leak.patch (git-fixes
  CVE-2024-36947).
- Update
  patches.suse/regmap-maple-Fix-cache-corruption-in-regcache_maple_.patch
  (git-fixes bsc#1225695 CVE-2024-36019).
- Update
  patches.suse/s390-cio-Ensure-the-copied-buf-is-NUL-terminated.patch
  (git-fixes bsc#1223869 bsc#1225747 CVE-2024-36931).
- Update
  patches.suse/s390-qeth-Fix-kernel-panic-after-setting-hsuid.patch
  (git-fixes bsc#1223874 bsc#1225775 CVE-2024-36928).
- Update
  patches.suse/scsi-qla2xxx-Fix-off-by-one-in-qla_edif_app_getstats.patch
  (git-fixes bsc#1225704 CVE-2024-36025).
- Update
  patches.suse/spi-fix-null-pointer-dereference-within-spi_sync.patch
  (git-fixes CVE-2024-36930).
- Update
  patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  (bsc#1224331 bsc#1224602 CVE-2024-35814).
- Update
  patches.suse/tty-n_gsm-fix-possible-out-of-bounds-in-gsm0_receive.patch
  (git-fixes bsc#1225642 CVE-2024-36016).
- Update
  patches.suse/usb-gadget-f_fs-Fix-race-between-aio_cancel-and-AIO-.patch
  (git-fixes bsc#1225749 CVE-2024-36894).
- Update
  patches.suse/usb-gadget-uvc-use-correct-buffer-size-when-parsing-.patch
  (git-fixes bsc#1225750 CVE-2024-36895).
- Update
  patches.suse/usb-typec-tcpm-Check-for-port-partner-validity-befor.patch
  (git-fixes bsc#1225748 CVE-2024-36893).
- Update
  patches.suse/wifi-iwlwifi-mvm-guard-against-invalid-STA-ID-on-rem.patch
  (stable-fixes bsc#1225769 CVE-2024-36921).
- Update
  patches.suse/wifi-iwlwifi-read-txq-read_ptr-under-lock.patch
  (stable-fixes CVE-2024-36922).
- Update
  patches.suse/wifi-nl80211-don-t-free-NULL-coalescing-rule.patch
  (git-fixes CVE-2024-36941).
- Update
  patches.suse/x86-efistub-Call-mixed-mode-boot-services-on-the-firmware-.patch
  (git-fixes bsc#1224742 CVE-2024-35803).
- commit 539780f</changelog>
  <changelog author="dwagner@suse.de" date="1717416007">- nvmet: fix ns enable/disable possible hang (git-fixes).
- nvme-multipath: fix io accounting on failover (git-fixes).
- nvme: fix multipath batched completion accounting (git-fixes).
- commit ed3b392</changelog>
  <changelog author="dwagner@suse.de" date="1717416008">- scsi: lpfc: Copyright updates for 14.4.0.2 patches
  (bsc#1225842).
- scsi: lpfc: Update lpfc version to 14.4.0.2 (bsc#1225842).
- scsi: lpfc: Add support for 32 byte CDBs (bsc#1225842).
- scsi: lpfc: Change lpfc_hba hba_flag member into a bitmask
  (bsc#1225842).
  Refresh:
  - patches.suse/lpfc-reintroduce-old-irq-probe-logic.patch
- scsi: lpfc: Introduce rrq_list_lock to protect active_rrq_list
  (bsc#1225842).
- scsi: lpfc: Clear deferred RSCN processing flag when driver
  is unloading (bsc#1225842).
- scsi: lpfc: Update logging of protection type for T10 DIF I/O
  (bsc#1225842).
- scsi: lpfc: Change default logging level for unsolicited CT
  MIB commands (bsc#1225842).
- commit 5a56384</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416009">- smb: client: fix mount when dns_resolver key is not available
  (git-fixes, bsc#1225172).
- commit 28edb5c</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416010">- cifs: fix leak of iface for primary channel (git-fixes,
  bsc#1225172).
- commit b7eb8e8</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416011">- Revert "cifs: reconnect work should have reference on server
  struct" (git-fixes, bsc#1225172).
- commit 3ca4c0c</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416012">- smb: client: fix parsing of SMB3.1.1 POSIX create context
  (git-fixes, bsc#1225172).
- commit 5f27f69</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416013">- cifs: failure to add channel on iface should bump up weight
  (git-fixes, bsc#1225172).
- commit 007b237</changelog>
  <changelog author="tonyj@suse.de" date="1717416014">- perf/x86: Fix out of range data (git-fixes).
- perf/x86/intel/ds: Don't clear -&gt;pebs_data_cfg for the last
  PEBS event (git-fixes).
- perf/x86/amd/lbr: Discard erroneous branch entries (git-fixes).
- commit 664d77f</changelog>
  <changelog author="dsterba@suse.com" date="1717588800">- blacklist.conf: remove fix for CVE-2024-35956 bsc#1224674, not applicable
- Delete patches.suse/btrfs-qgroup-fix-qgroup-prealloc-rsv-leak-in-subvolu.patch.
  Quoting bsc#1225945#c11:
  "So the upstream 6.5 kernel commit (1b53e51a4a8f ("btrfs: don't commit
  transaction for every subvol create")
  ) was never backported to SLE, so that fix eb96e221937a ("btrfs: fix
  unwritten extent buffer after snapshotting a new subvolume") was never
  backported."
- commit d947258</changelog>
  <changelog author="tonyj@suse.de" date="1717588801">- perf pmu: Count sys and cpuid JSON events separately (git
  fixes).
- perf stat: Don't display metric header for non-leader uncore
  events (git-fixes).
- perf daemon: Fix file leak in daemon_session__control
  (git-fixes).
- perf symbols: Fix ownership of string in dso__load_vmlinux()
  (git-fixes).
- perf thread: Fixes to thread__new() related to initializing comm
  (git-fixes).
- perf report: Avoid SEGV in report__setup_sample_type()
  (git-fixes).
- perf ui browser: Don't save pointer to stack memory (git-fixes).
- perf bench internals inject-build-id: Fix trap divide when
  collecting just one DSO (git-fixes).
- perf intel-pt: Fix unassigned instruction op (discovered by
  MemorySanitizer) (git-fixes).
- perf test shell arm_coresight: Increase buffer size for
  Coresight basic tests (git-fixes).
- perf docs: Document bpf event modifier (git-fixes).
- perf bench uprobe: Remove lib64 from libc.so.6 binary path
  (git-fixes).
- perf record: Fix debug message placement for test consumption
  (git-fixes).
- perf tests: Apply attributes to all events in object code
  reading test (git-fixes).
- perf tests: Make "test data symbol" more robust on Neoverse N1
  (git-fixes).
- perf annotate: Fix annotation_calc_lines() to pass correct
  address to get_srcline() (git-fixes).
- perf stat: Do not fail on metrics on s390 z/VM systems
  (git-fixes).
- perf sched timehist: Fix -g/--call-graph option failure
  (git-fixes).
- perf annotate: Get rid of duplicate --group option item
  (git-fixes).
- perf probe: Add missing libgen.h header needed for using
  basename() (git-fixes).
- perf record: Delete session after stopping sideband thread
  (git-fixes).
- perf auxtrace: Fix multiple use of --itrace option (git-fixes).
- perf script: Show also errors for --insn-trace option
  (git-fixes).
- perf lock contention: Add a missing NULL check (git-fixes).
- perf vendor events amd: Fix Zen 4 cache latency events
  (git-fixes).
- libperf evlist: Avoid out-of-bounds access (git-fixes).
- perf pmu: Fix a potential memory leak in perf_pmu__lookup()
  (git-fixes).
- perf print-events: make is_event_supported() more robust
  (git-fixes).
- perf list: fix short description for some cache events
  (git-fixes).
- perf metric: Don't remove scale from counts (git-fixes).
- perf stat: Avoid metric-only segv (git-fixes).
- perf expr: Fix "has_event" function for metric style events
  (git-fixes).
- perf srcline: Add missed addr2line closes (git-fixes).
- perf thread_map: Free strlist on normal path in
  thread_map__new_by_tid_str() (git-fixes).
- perf bpf: Clean up the generated/copied vmlinux.h (git-fixes).
- perf jevents: Drop or simplify small integer values (git-fixes).
- perf evsel: Fix duplicate initialization of data-&gt;id in
  evsel__parse_sample() (git-fixes).
- perf pmu: Treat the msr pmu as software (git-fixes).
- perf record: Check conflict between '--timestamp-filename'
  option and pipe mode before recording (git-fixes).
- perf record: Fix possible incorrect free in
  record__switch_output() (git-fixes).
- perf vendor events amd: Add Zen 4 memory controller events
  (git-fixes).
- perf top: Uniform the event name for the hybrid machine
  (git-fixes).
- perf top: Use evsel's cpus to replace user_requested_cpus
  (git-fixes).
- commit a1f9340</changelog>
  <changelog author="tonyj@suse.de" date="1717675200">- perf ui browser: Avoid SEGV on title (git fixes).
- commit 1578c22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717675201">- inet: inet_defrag: prevent sk release while still in use
  (CVE-2024-26921 bsc#1223138).
- commit 2016faf</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717675202">- net: preserve kabi for sk_buff (CVE-2024-26921 bsc#1223138).
- commit 7bf5961</changelog>
</package>
<package pkgid="342270ffea9d627cfa1651a43653cdae6230a609d3a185354362ec206066f158" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150600.8.5.4"/>
  <changelog author="mkubecek@suse.cz" date="1717416000">- series.conf: cleanup
  Fix subsection header to silence series_insert error.
- commit 4628dc3</changelog>
  <changelog author="mkubecek@suse.cz" date="1717416001">- netfilter: nf_tables: release mutex after nft_gc_seq_end from
  abort path (CVE-2024-26925 bsc#1223390).
- commit 578a709</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717416002">- Add reference to L3 bsc#1225765 in BPF control flow graph and precision backtrack fixes (bsc#1225756)
  The L3 bsc#1225765 was created seperately since our customer requires
  PTF.
- Update patches.suse/bpf-fix-precision-backtracking-instruction-iteration.patch
- Update patches.suse/bpf-handle-ldimm64-properly-in-check_cfg.patch
- Update patches.suse/selftests-bpf-add-edge-case-backtracking-logic-test.patch
- Update patches.suse/selftests-bpf-precision-tracking-test-for-BPF_NEG-an.patch
- commit 054635e</changelog>
  <changelog author="msuchanek@suse.de" date="1717416003">- powerpc/uaccess: Use YZ asm constraint for ld (bsc#1194869).
- powerpc/uaccess: Fix build errors seen with GCC 13/14
  (bsc#1194869).
- commit 46b5d84</changelog>
  <changelog author="msuchanek@suse.de" date="1717416004">- blacklist.conf: PPC fsl_msi is not used
- commit ae6590d</changelog>
  <changelog author="msuchanek@suse.de" date="1717416005">- powerpc/pseries/lparcfg: drop error message from guest name
  lookup (bsc#1187716 ltc#193451 git-fixes).
- commit ceab637</changelog>
  <changelog author="mfranc@suse.cz" date="1717416006">- Update
  patches.suse/ALSA-hda-intel-sdw-acpi-fix-usage-of-device_get_name.patch
  (git-fixes CVE-2024-36955).
- Update
  patches.suse/ARM-9381-1-kasan-clear-stale-stack-poison.patch
  (git-fixes bsc#1225715 CVE-2024-36906).
- Update
  patches.suse/Bluetooth-HCI-Fix-potential-null-ptr-deref.patch
  (git-fixes bsc#1225579 CVE-2024-36011).
- Update
  patches.suse/Bluetooth-L2CAP-Fix-slab-use-after-free-in-l2cap_con.patch
  (git-fixes bsc#1225578 CVE-2024-36013).
- Update
  patches.suse/Bluetooth-msft-fix-slab-use-after-free-in-msft_do_cl.patch
  (git-fixes bsc#1225502 CVE-2024-36012).
- Update
  patches.suse/Bluetooth-qca-add-missing-firmware-sanity-checks.patch
  (git-fixes bsc#1225722 CVE-2024-36880).
- Update
  patches.suse/Bluetooth-qca-fix-firmware-check-error-path.patch
  (git-fixes CVE-2024-36942).
- Update
  patches.suse/Bluetooth-qca-fix-info-leak-when-fetching-fw-build-i.patch
  (git-fixes bsc#1225720 CVE-2024-36032).
- Update
  patches.suse/KVM-x86-mmu-Write-protect-L2-SPTEs-in-TDP-MMU-when-c.patch
  (git-fixes bsc#1223749 CVE-2024-26990).
- Update
  patches.suse/KVM-x86-pmu-Disable-support-for-adaptive-PEBS.patch
  (git-fixes bsc#1223692 CVE-2024-26992).
- Update
  patches.suse/Reapply-drm-qxl-simplify-qxl_fence_wait.patch
  (stable-fixes CVE-2024-36944).
- Update
  patches.suse/USB-core-Fix-access-violation-during-port-device-rem.patch
  (git-fixes bsc#1225734 CVE-2024-36896).
- Update
  patches.suse/amd-amdkfd-sync-all-devices-to-wait-all-processes-be.patch
  (stable-fixes CVE-2024-36949).
- Update patches.suse/bpf-Check-bloom-filter-map-value-size.patch
  (bsc#1224488 CVE-2024-35905 bsc#1225766 CVE-2024-36918).
- Update
  patches.suse/clk-sunxi-ng-h6-Reparent-CPUX-during-PLL-CPUX-rate-c.patch
  (git-fixes bsc#1225692 CVE-2023-52882).
- Update
  patches.suse/cxl-pci-Fix-disabling-memory-if-DVSEC-CXL-Range-does.patch
  (git-fixes CVE-2024-26761).
- Update
  patches.suse/drm-amd-display-Atom-Integrated-System-Info-v2_2-for.patch
  (stable-fixes bsc#1225735 CVE-2024-36897).
- Update
  patches.suse/drm-amd-pm-fixes-a-random-hang-in-S4-for-SMU-v13.0.4.patch
  (stable-fixes bsc#1225705 CVE-2024-36026).
- Update
  patches.suse/drm-amdkfd-range-check-cp-bad-op-exception-interrupt.patch
  (stable-fixes CVE-2024-36951).
- Update
  patches.suse/drm-arm-malidp-fix-a-possible-null-pointer-dereferen.patch
  (git-fixes bsc#1225593 CVE-2024-36014).
- Update
  patches.suse/drm-nouveau-firmware-Fix-SG_DEBUG-error-with-nvkm_fi.patch
  (stable-fixes bsc#1225728 CVE-2024-36885).
- Update
  patches.suse/efi-unaccepted-touch-soft-lockup-during-memory-accept.patch
  (git-fixes bsc#1225773 CVE-2024-36936).
- Update
  patches.suse/firewire-ohci-mask-bus-reset-interrupts-between-ISR-.patch
  (stable-fixes CVE-2024-36950).
- Update patches.suse/gpiolib-cdev-fix-uninitialised-kfifo.patch
  (git-fixes bsc#1225736 CVE-2024-36898).
- Update
  patches.suse/i40e-fix-vf-may-be-used-uninitialized-in-this-functi.patch
  (git-fixes bsc#1225698 CVE-2024-36020).
- Update
  patches.suse/maple_tree-fix-mas_empty_area_rev-null-pointer-deref.patch
  (git-fixes bsc#1225710 CVE-2024-36891).
- Update
  patches.suse/mm-slab-make-__free-kfree-accept-error-pointers.patch
  (git-fixes bsc#1225714 CVE-2024-36890).
- Update
  patches.suse/mmc-sdhci-msm-pervent-access-to-suspended-controller.patch
  (git-fixes bsc#1225708 CVE-2024-36029).
- Update
  patches.suse/net-hns3-fix-kernel-crash-when-devlink-reload-during.patch
  (git-fixes bsc#1225699 CVE-2024-36021).
- Update
  patches.suse/nouveau-dmem-handle-kcalloc-allocation-failure.patch
  (git-fixes CVE-2024-26943).
- Update
  patches.suse/nouveau-uvmm-fix-addr-range-calcs-for-remap-operatio.patch
  (git-fixes bsc#1225694 CVE-2024-36018).
- Update
  patches.suse/pinctrl-core-delete-incorrect-free-in-pinctrl_enable.patch
  (git-fixes CVE-2024-36940).
- Update
  patches.suse/pinctrl-devicetree-fix-refcount-leak-in-pinctrl_dt_t.patch
  (git-fixes CVE-2024-36959).
- Update
  patches.suse/ppdev-Add-an-error-check-in-register_device.patch
  (git-fixes bsc#1225640 CVE-2024-36015).
- Update patches.suse/qibfs-fix-dentry-leak.patch (git-fixes
  CVE-2024-36947).
- Update
  patches.suse/regmap-maple-Fix-cache-corruption-in-regcache_maple_.patch
  (git-fixes bsc#1225695 CVE-2024-36019).
- Update
  patches.suse/s390-cio-Ensure-the-copied-buf-is-NUL-terminated.patch
  (git-fixes bsc#1223869 bsc#1225747 CVE-2024-36931).
- Update
  patches.suse/s390-qeth-Fix-kernel-panic-after-setting-hsuid.patch
  (git-fixes bsc#1223874 bsc#1225775 CVE-2024-36928).
- Update
  patches.suse/scsi-qla2xxx-Fix-off-by-one-in-qla_edif_app_getstats.patch
  (git-fixes bsc#1225704 CVE-2024-36025).
- Update
  patches.suse/spi-fix-null-pointer-dereference-within-spi_sync.patch
  (git-fixes CVE-2024-36930).
- Update
  patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  (bsc#1224331 bsc#1224602 CVE-2024-35814).
- Update
  patches.suse/tty-n_gsm-fix-possible-out-of-bounds-in-gsm0_receive.patch
  (git-fixes bsc#1225642 CVE-2024-36016).
- Update
  patches.suse/usb-gadget-f_fs-Fix-race-between-aio_cancel-and-AIO-.patch
  (git-fixes bsc#1225749 CVE-2024-36894).
- Update
  patches.suse/usb-gadget-uvc-use-correct-buffer-size-when-parsing-.patch
  (git-fixes bsc#1225750 CVE-2024-36895).
- Update
  patches.suse/usb-typec-tcpm-Check-for-port-partner-validity-befor.patch
  (git-fixes bsc#1225748 CVE-2024-36893).
- Update
  patches.suse/wifi-iwlwifi-mvm-guard-against-invalid-STA-ID-on-rem.patch
  (stable-fixes bsc#1225769 CVE-2024-36921).
- Update
  patches.suse/wifi-iwlwifi-read-txq-read_ptr-under-lock.patch
  (stable-fixes CVE-2024-36922).
- Update
  patches.suse/wifi-nl80211-don-t-free-NULL-coalescing-rule.patch
  (git-fixes CVE-2024-36941).
- Update
  patches.suse/x86-efistub-Call-mixed-mode-boot-services-on-the-firmware-.patch
  (git-fixes bsc#1224742 CVE-2024-35803).
- commit 539780f</changelog>
  <changelog author="dwagner@suse.de" date="1717416007">- nvmet: fix ns enable/disable possible hang (git-fixes).
- nvme-multipath: fix io accounting on failover (git-fixes).
- nvme: fix multipath batched completion accounting (git-fixes).
- commit ed3b392</changelog>
  <changelog author="dwagner@suse.de" date="1717416008">- scsi: lpfc: Copyright updates for 14.4.0.2 patches
  (bsc#1225842).
- scsi: lpfc: Update lpfc version to 14.4.0.2 (bsc#1225842).
- scsi: lpfc: Add support for 32 byte CDBs (bsc#1225842).
- scsi: lpfc: Change lpfc_hba hba_flag member into a bitmask
  (bsc#1225842).
  Refresh:
  - patches.suse/lpfc-reintroduce-old-irq-probe-logic.patch
- scsi: lpfc: Introduce rrq_list_lock to protect active_rrq_list
  (bsc#1225842).
- scsi: lpfc: Clear deferred RSCN processing flag when driver
  is unloading (bsc#1225842).
- scsi: lpfc: Update logging of protection type for T10 DIF I/O
  (bsc#1225842).
- scsi: lpfc: Change default logging level for unsolicited CT
  MIB commands (bsc#1225842).
- commit 5a56384</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416009">- smb: client: fix mount when dns_resolver key is not available
  (git-fixes, bsc#1225172).
- commit 28edb5c</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416010">- cifs: fix leak of iface for primary channel (git-fixes,
  bsc#1225172).
- commit b7eb8e8</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416011">- Revert "cifs: reconnect work should have reference on server
  struct" (git-fixes, bsc#1225172).
- commit 3ca4c0c</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416012">- smb: client: fix parsing of SMB3.1.1 POSIX create context
  (git-fixes, bsc#1225172).
- commit 5f27f69</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416013">- cifs: failure to add channel on iface should bump up weight
  (git-fixes, bsc#1225172).
- commit 007b237</changelog>
  <changelog author="tonyj@suse.de" date="1717416014">- perf/x86: Fix out of range data (git-fixes).
- perf/x86/intel/ds: Don't clear -&gt;pebs_data_cfg for the last
  PEBS event (git-fixes).
- perf/x86/amd/lbr: Discard erroneous branch entries (git-fixes).
- commit 664d77f</changelog>
  <changelog author="dsterba@suse.com" date="1717588800">- blacklist.conf: remove fix for CVE-2024-35956 bsc#1224674, not applicable
- Delete patches.suse/btrfs-qgroup-fix-qgroup-prealloc-rsv-leak-in-subvolu.patch.
  Quoting bsc#1225945#c11:
  "So the upstream 6.5 kernel commit (1b53e51a4a8f ("btrfs: don't commit
  transaction for every subvol create")
  ) was never backported to SLE, so that fix eb96e221937a ("btrfs: fix
  unwritten extent buffer after snapshotting a new subvolume") was never
  backported."
- commit d947258</changelog>
  <changelog author="tonyj@suse.de" date="1717588801">- perf pmu: Count sys and cpuid JSON events separately (git
  fixes).
- perf stat: Don't display metric header for non-leader uncore
  events (git-fixes).
- perf daemon: Fix file leak in daemon_session__control
  (git-fixes).
- perf symbols: Fix ownership of string in dso__load_vmlinux()
  (git-fixes).
- perf thread: Fixes to thread__new() related to initializing comm
  (git-fixes).
- perf report: Avoid SEGV in report__setup_sample_type()
  (git-fixes).
- perf ui browser: Don't save pointer to stack memory (git-fixes).
- perf bench internals inject-build-id: Fix trap divide when
  collecting just one DSO (git-fixes).
- perf intel-pt: Fix unassigned instruction op (discovered by
  MemorySanitizer) (git-fixes).
- perf test shell arm_coresight: Increase buffer size for
  Coresight basic tests (git-fixes).
- perf docs: Document bpf event modifier (git-fixes).
- perf bench uprobe: Remove lib64 from libc.so.6 binary path
  (git-fixes).
- perf record: Fix debug message placement for test consumption
  (git-fixes).
- perf tests: Apply attributes to all events in object code
  reading test (git-fixes).
- perf tests: Make "test data symbol" more robust on Neoverse N1
  (git-fixes).
- perf annotate: Fix annotation_calc_lines() to pass correct
  address to get_srcline() (git-fixes).
- perf stat: Do not fail on metrics on s390 z/VM systems
  (git-fixes).
- perf sched timehist: Fix -g/--call-graph option failure
  (git-fixes).
- perf annotate: Get rid of duplicate --group option item
  (git-fixes).
- perf probe: Add missing libgen.h header needed for using
  basename() (git-fixes).
- perf record: Delete session after stopping sideband thread
  (git-fixes).
- perf auxtrace: Fix multiple use of --itrace option (git-fixes).
- perf script: Show also errors for --insn-trace option
  (git-fixes).
- perf lock contention: Add a missing NULL check (git-fixes).
- perf vendor events amd: Fix Zen 4 cache latency events
  (git-fixes).
- libperf evlist: Avoid out-of-bounds access (git-fixes).
- perf pmu: Fix a potential memory leak in perf_pmu__lookup()
  (git-fixes).
- perf print-events: make is_event_supported() more robust
  (git-fixes).
- perf list: fix short description for some cache events
  (git-fixes).
- perf metric: Don't remove scale from counts (git-fixes).
- perf stat: Avoid metric-only segv (git-fixes).
- perf expr: Fix "has_event" function for metric style events
  (git-fixes).
- perf srcline: Add missed addr2line closes (git-fixes).
- perf thread_map: Free strlist on normal path in
  thread_map__new_by_tid_str() (git-fixes).
- perf bpf: Clean up the generated/copied vmlinux.h (git-fixes).
- perf jevents: Drop or simplify small integer values (git-fixes).
- perf evsel: Fix duplicate initialization of data-&gt;id in
  evsel__parse_sample() (git-fixes).
- perf pmu: Treat the msr pmu as software (git-fixes).
- perf record: Check conflict between '--timestamp-filename'
  option and pipe mode before recording (git-fixes).
- perf record: Fix possible incorrect free in
  record__switch_output() (git-fixes).
- perf vendor events amd: Add Zen 4 memory controller events
  (git-fixes).
- perf top: Uniform the event name for the hybrid machine
  (git-fixes).
- perf top: Use evsel's cpus to replace user_requested_cpus
  (git-fixes).
- commit a1f9340</changelog>
  <changelog author="tonyj@suse.de" date="1717675200">- perf ui browser: Avoid SEGV on title (git fixes).
- commit 1578c22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717675201">- inet: inet_defrag: prevent sk release while still in use
  (CVE-2024-26921 bsc#1223138).
- commit 2016faf</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717675202">- net: preserve kabi for sk_buff (CVE-2024-26921 bsc#1223138).
- commit 7bf5961</changelog>
</package>
<package pkgid="91f9d75e372e58b9268e50aac5b7b7df2933ca0a933b0b39432e02772d0583f7" name="dom4j" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="150200.12.10.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * dom4j-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1531224000">- Added patch:
  * dom4j-javadoc.patch
    + Don't load urls while building javadoc in environment without
    connectivity</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="07ccbd26e4787f563f0b3735d2c56ac2fb7480777e60a8183a181e3f772db974" name="dom4j" arch="src">
  <version epoch="0" ver="2.1.4" rel="150200.12.10.2"/>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * dom4j-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1531224000">- Added patch:
  * dom4j-javadoc.patch
    + Don't load urls while building javadoc in environment without
    connectivity</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="44135ee0037543bdd456241afbd5065a038a2f0c327d74b4346ff0428fd07b82" name="dom4j-demo" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="150200.12.10.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * dom4j-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1531224000">- Added patch:
  * dom4j-javadoc.patch
    + Don't load urls while building javadoc in environment without
    connectivity</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="690def763b1ab0ffc876c06e1e0c7ed2db848736a95dc9c1f0795d4421baa1d3" name="dom4j-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="150200.12.10.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * dom4j-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1531224000">- Added patch:
  * dom4j-javadoc.patch
    + Don't load urls while building javadoc in environment without
    connectivity</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="0d4b8ded7c092e5cdac91fed578031ab9145a70711da8a1a57a6a9289fabdbf2" name="dpdk22" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="8acd9c6c1841ecf24cbf898bf282c6cc6bb915a97d092f8591807610fee2ab34" name="dpdk22" arch="ppc64le">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="4b0693353773d33f619b1d617b2b32569d33ba15c877df9da4040800b1b68cd1" name="dpdk22" arch="src">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="492c129074a913714809acff906cf4d427c20469b542fbad233546e24f509e7e" name="dpdk22" arch="x86_64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="d384137158c37546efacca06b3d66441dd28bb26c76ce1bda53fc1028846f713" name="dpdk22-devel" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="55709be4059d5b4982c465fbcb600b374a909a10a721b811f4e37a8b8df9e448" name="dpdk22-devel" arch="ppc64le">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="6660e359a789fba3ac7261dcecae5272ffbc29d6eb40baace708a35208c03521" name="dpdk22-devel" arch="x86_64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="04f2d5e0eee4ecf6e0b2eedd066c7e86e3464ce162be22f56f57636077d17f14" name="dpdk22-devel-static" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="b8509a375b49d58cb6a556ecb8e5ce8f6995ffb4ec6e3176b7ab8dbd3a068ca5" name="dpdk22-devel-static" arch="ppc64le">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="df586b03823071291cd9dce08aee23175feed2c4824f7fb58e91ae8f04e08799" name="dpdk22-devel-static" arch="x86_64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="2b984dc7202a343ef293a247cdba8ee1b0d41d8ba2704417289647d1309deda3" name="dpdk22-doc" arch="noarch">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="739cf6e9451ab2961e8137a24e9f901436b6a87e8dfad0049aa7005707921a83" name="dpdk22-examples" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="6603d622aaf90a0a5109d74172e233ba3568716dfa26d065898e63c6f001cfb3" name="dpdk22-examples" arch="ppc64le">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="372a87b4546527d80204e5a9d6d9013990db5fdb313670483054806925c09663" name="dpdk22-examples" arch="x86_64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="2df09383c8aa3de486cb881be3725c965f9d126117b19a2e64009d450ab48e76" name="dpdk22-kmp-default" arch="aarch64">
  <version epoch="0" ver="22.11.1_k5.14.21_150500.55.62" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="a79643de3acdbb96f04758a84634a22f71a9eb2fff55b06ef32a02ae90252796" name="dpdk22-kmp-default" arch="ppc64le">
  <version epoch="0" ver="22.11.1_k5.14.21_150500.55.62" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="01b93c896dfd2d6a3261bb3ee730690a7816103d1d7ef6fd320b15c87723b918" name="dpdk22-kmp-default" arch="x86_64">
  <version epoch="0" ver="22.11.1_k5.14.21_150500.55.62" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="56cef3c0b663fb3fc45543912932531b782d0f2bbe7a391bc5340ad3273a782b" name="dpdk22-thunderx" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="e3315db9aa40cec0ffbab70ee3edca7100c5dffbcfc4f5f6becd83d7b1e49319" name="dpdk22-thunderx" arch="src">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="cfd6376c9d64744c2c601e8a170ea2b4aa02e8c1662d5ef63a786e86648e70d1" name="dpdk22-thunderx-devel" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="2723858e0b3249e6178236a9522aa21d760a8703267adacfc2641b929e14cca4" name="dpdk22-thunderx-devel-static" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="f9d1341622784bf30a3034eaa861c5493ea2b9964bad67ba967e500e9290118b" name="dpdk22-thunderx-doc" arch="noarch">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="a7697e012011c635bc492fb984c272363d3685b21c401b36e8d70b2b5d03ac75" name="dpdk22-thunderx-examples" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="bbe21c74ea7fb631967fb3e3bbf7cdd4255d340d1e2535c6d7f05356aeb8fe3c" name="dpdk22-thunderx-kmp-default" arch="aarch64">
  <version epoch="0" ver="22.11.1_k5.14.21_150500.55.62" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="1362ead2637db86014c4ae84d97a2023339c2b9779c30b17ff033f38b3162c69" name="dpdk22-thunderx-tools" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="14a897accb69dee858af3b1ffc9159433358434c920e47b2c6b2cf42fa2e4f5e" name="dpdk22-tools" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="fc9b681e2a9506e7c97e2f52d0ffbe8e3d6fcfafc1324e5acb64291cc3181c22" name="dpdk22-tools" arch="ppc64le">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="3f1a6bee315aa64d1545671f8c7a68506051433fc416895e0a90ed1b7df18d0d" name="dpdk22-tools" arch="x86_64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="ea49fa700bdff101708ebdf6e062485d4c1d864f1e069101b9498f22174f4972" name="dwz" arch="aarch64">
  <version epoch="0" ver="0.12" rel="150000.3.8.1"/>
  <changelog author="pth@suse.de" date="1340798400">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1418212800">- Update to new upstream version 0.11
  * fix iterative hashing on big-endian targets
  * optimize DW_FORM_data[48] DW_AT_high_pc that GCC 4.8 produces
  * fix up handling of DIE equality if more than one DIE in the same
  CU compare equal
  * check DW_FORM_ref_addr properly during fi_multifile phase
  * when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
  and DW_FORM_data4 for dwarf[23] rather than vice versa
  * handle .gdb_index version 7 and 8</changelog>
  <changelog author="rguenther@suse.com" date="1480420800">- Update to new upstream version 0.12
  * Fix up alignment of non-allocated sections and section header table
  after sections which have changed size.</changelog>
  <changelog author="rguenther@suse.com" date="1487678400">- Add dwz-0.12-ignore-nobits.patch to ignore SHT_NOBITS sections
  that are placed out-of-order by objcopy when extracting debuginfo
  and place them at sh_offset zero.</changelog>
  <changelog author="rguenther@suse.com" date="1488888000">- Adjust dwz-0.12-ignore-nobits.patch to also handle non-monotonically
  increasing sh_offset as created by the kernel linker script.</changelog>
  <changelog author="tdevries@suse.com" date="1710936000">- Add dwz-0.12-clean-up-temporary-file-in-hardlink-mode.patch to
  cleanup left-over temporary file (swo#24275, bsc#1221634).
- Replace "%doc COPYING" with "%license COPYING".</changelog>
</package>
<package pkgid="476fe2e69bf1e5daf8579666da044d45bd225b8232bd67bbfa3a3e2438f3d5fa" name="dwz" arch="ppc64le">
  <version epoch="0" ver="0.12" rel="150000.3.8.1"/>
  <changelog author="pth@suse.de" date="1340798400">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1418212800">- Update to new upstream version 0.11
  * fix iterative hashing on big-endian targets
  * optimize DW_FORM_data[48] DW_AT_high_pc that GCC 4.8 produces
  * fix up handling of DIE equality if more than one DIE in the same
  CU compare equal
  * check DW_FORM_ref_addr properly during fi_multifile phase
  * when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
  and DW_FORM_data4 for dwarf[23] rather than vice versa
  * handle .gdb_index version 7 and 8</changelog>
  <changelog author="rguenther@suse.com" date="1480420800">- Update to new upstream version 0.12
  * Fix up alignment of non-allocated sections and section header table
  after sections which have changed size.</changelog>
  <changelog author="rguenther@suse.com" date="1487678400">- Add dwz-0.12-ignore-nobits.patch to ignore SHT_NOBITS sections
  that are placed out-of-order by objcopy when extracting debuginfo
  and place them at sh_offset zero.</changelog>
  <changelog author="rguenther@suse.com" date="1488888000">- Adjust dwz-0.12-ignore-nobits.patch to also handle non-monotonically
  increasing sh_offset as created by the kernel linker script.</changelog>
  <changelog author="tdevries@suse.com" date="1710936000">- Add dwz-0.12-clean-up-temporary-file-in-hardlink-mode.patch to
  cleanup left-over temporary file (swo#24275, bsc#1221634).
- Replace "%doc COPYING" with "%license COPYING".</changelog>
</package>
<package pkgid="bb99970fc1aa0c6d40487fe7dbde2de0d53ba26bd64ea2cc9322db37923712ef" name="dwz" arch="s390x">
  <version epoch="0" ver="0.12" rel="150000.3.8.1"/>
  <changelog author="pth@suse.de" date="1340798400">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1418212800">- Update to new upstream version 0.11
  * fix iterative hashing on big-endian targets
  * optimize DW_FORM_data[48] DW_AT_high_pc that GCC 4.8 produces
  * fix up handling of DIE equality if more than one DIE in the same
  CU compare equal
  * check DW_FORM_ref_addr properly during fi_multifile phase
  * when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
  and DW_FORM_data4 for dwarf[23] rather than vice versa
  * handle .gdb_index version 7 and 8</changelog>
  <changelog author="rguenther@suse.com" date="1480420800">- Update to new upstream version 0.12
  * Fix up alignment of non-allocated sections and section header table
  after sections which have changed size.</changelog>
  <changelog author="rguenther@suse.com" date="1487678400">- Add dwz-0.12-ignore-nobits.patch to ignore SHT_NOBITS sections
  that are placed out-of-order by objcopy when extracting debuginfo
  and place them at sh_offset zero.</changelog>
  <changelog author="rguenther@suse.com" date="1488888000">- Adjust dwz-0.12-ignore-nobits.patch to also handle non-monotonically
  increasing sh_offset as created by the kernel linker script.</changelog>
  <changelog author="tdevries@suse.com" date="1710936000">- Add dwz-0.12-clean-up-temporary-file-in-hardlink-mode.patch to
  cleanup left-over temporary file (swo#24275, bsc#1221634).
- Replace "%doc COPYING" with "%license COPYING".</changelog>
</package>
<package pkgid="8afb33f48e338af3e383fb73d8b251d109f782477c3ce5f16db223a3b2771c0c" name="dwz" arch="src">
  <version epoch="0" ver="0.12" rel="150000.3.8.1"/>
  <changelog author="pth@suse.de" date="1340798400">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1418212800">- Update to new upstream version 0.11
  * fix iterative hashing on big-endian targets
  * optimize DW_FORM_data[48] DW_AT_high_pc that GCC 4.8 produces
  * fix up handling of DIE equality if more than one DIE in the same
  CU compare equal
  * check DW_FORM_ref_addr properly during fi_multifile phase
  * when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
  and DW_FORM_data4 for dwarf[23] rather than vice versa
  * handle .gdb_index version 7 and 8</changelog>
  <changelog author="rguenther@suse.com" date="1480420800">- Update to new upstream version 0.12
  * Fix up alignment of non-allocated sections and section header table
  after sections which have changed size.</changelog>
  <changelog author="rguenther@suse.com" date="1487678400">- Add dwz-0.12-ignore-nobits.patch to ignore SHT_NOBITS sections
  that are placed out-of-order by objcopy when extracting debuginfo
  and place them at sh_offset zero.</changelog>
  <changelog author="rguenther@suse.com" date="1488888000">- Adjust dwz-0.12-ignore-nobits.patch to also handle non-monotonically
  increasing sh_offset as created by the kernel linker script.</changelog>
  <changelog author="tdevries@suse.com" date="1710936000">- Add dwz-0.12-clean-up-temporary-file-in-hardlink-mode.patch to
  cleanup left-over temporary file (swo#24275, bsc#1221634).
- Replace "%doc COPYING" with "%license COPYING".</changelog>
</package>
<package pkgid="2275abd9d4af34208b5a4a2eaef22840a79f87f16c4d164d88046cad05e1876d" name="dwz" arch="x86_64">
  <version epoch="0" ver="0.12" rel="150000.3.8.1"/>
  <changelog author="pth@suse.de" date="1340798400">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1418212800">- Update to new upstream version 0.11
  * fix iterative hashing on big-endian targets
  * optimize DW_FORM_data[48] DW_AT_high_pc that GCC 4.8 produces
  * fix up handling of DIE equality if more than one DIE in the same
  CU compare equal
  * check DW_FORM_ref_addr properly during fi_multifile phase
  * when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
  and DW_FORM_data4 for dwarf[23] rather than vice versa
  * handle .gdb_index version 7 and 8</changelog>
  <changelog author="rguenther@suse.com" date="1480420800">- Update to new upstream version 0.12
  * Fix up alignment of non-allocated sections and section header table
  after sections which have changed size.</changelog>
  <changelog author="rguenther@suse.com" date="1487678400">- Add dwz-0.12-ignore-nobits.patch to ignore SHT_NOBITS sections
  that are placed out-of-order by objcopy when extracting debuginfo
  and place them at sh_offset zero.</changelog>
  <changelog author="rguenther@suse.com" date="1488888000">- Adjust dwz-0.12-ignore-nobits.patch to also handle non-monotonically
  increasing sh_offset as created by the kernel linker script.</changelog>
  <changelog author="tdevries@suse.com" date="1710936000">- Add dwz-0.12-clean-up-temporary-file-in-hardlink-mode.patch to
  cleanup left-over temporary file (swo#24275, bsc#1221634).
- Replace "%doc COPYING" with "%license COPYING".</changelog>
</package>
<package pkgid="d64d02e0818ffe58c60adc53069aaee74335b368988fa1bd95f229a7e87e4211" name="e2fsprogs" arch="aarch64">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="d7717b3b2a683286b8eab5e389e1875b849d18dbe85bff66481f7c829068c2d1" name="e2fsprogs" arch="ppc64le">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="9fe69236ac5d40e75114c1b453f15e1ca237ff89e46d7e162766be0ebde88ff5" name="e2fsprogs" arch="s390x">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="c7593dd02b8cffa2fdc4f002472127347b972632fb3f9d5f2dbb75b3c32faa0d" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="4ec4422569ad3a0a27100883c0acb8fd6b7e28122d3030aa8c0c632058ad4f44" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="a2a5564ab3e566f7e4ff12236e5633e42792f99dd6bb0d7d63ed6ad6ee6d9203" name="e2fsprogs-devel" arch="aarch64">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="fed34032649cd36b76b344e90d556f82813ff78e65a51b8e04509b650aeb723e" name="e2fsprogs-devel" arch="ppc64le">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="684c32214dc62b6abc8a5d2c26f6c07bc0554cd47a75a06ff80e79de1ffaeec5" name="e2fsprogs-devel" arch="s390x">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="b86fa014ebf9528a881eb5905af292c412737db37a63795ed7f9e9b708e2e141" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="faf72521c9eab1862e087df86e2361b802a80541de77770a94b49a8171ebd991" name="e2fsprogs-scrub" arch="aarch64">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="7ca4af67778b23fdbb3d64430e19d0896fc38c66a4a14934aa9cdaea2f1d5cfd" name="e2fsprogs-scrub" arch="ppc64le">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="bf10e5606cb38c075a6a4a2b616e0fb894153e296e11742957c3a6744c172629" name="e2fsprogs-scrub" arch="s390x">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="9100aabc9fd1d3948b63f48cc7ab90bfa0648941a757b9d4c94b1d5155e957fb" name="e2fsprogs-scrub" arch="x86_64">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="ab79aa77679d241f534873cb0628a0d8d10d0cb39291ebb52cffc06e3bd7b405" name="elixir115" arch="noarch">
  <version epoch="0" ver="1.15.7" rel="150300.7.5.1"/>
  <changelog author="dev@mail.smarquardt.space" date="1604491200">- Elixir 1.11.2
  * Bug fixes
    Elixir
    [Code] Do not crash when getting docs for missing `erts` appdir
    [Kernel] Raise meaningful error if `:erlang.is_record` is used in guards
    [Kernel] Prune tracers when fetching `__ENV__` inside functions
    Mix
    [mix] Fix regression where aliases could not call themselves recursively
    [mix compile] Do not discard tracers that are set programatically</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1610366400">- Elixir 1.11.3
  * Enhancements
    Elixir
    [Macro] Add Macro.unique_var/2 and Macro.generate_unique_arguments/2
  * Bug fixes
    Elixir
    [Code] Do not raise when checking for operator ambiguity when :static_atoms_encoder is set in Code.string_to_quoted
    [Kernel] Emit undefined function warnings from with
    [Kernel] Do not fail type checking when literals are used in guards
    [Module] Do not warn for attributes used in @after_compile
    [Record] Make sure nested record names do not clobber each other
    ExUnit
    [ExUnit.Assertions] Do not crash if there are macros and module attributes on the left side of ++
    IEx
    [IEx.Helpers] Do not use Unicode chars if ANSI is disabled
    Mix
    [mix deps.compile] Fix compatibility with rebar v3.14
    [mix release] Do not use private ram_file:compress/1
    [mix xref] Do not crash when retrieving calls for modules in memory</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1616155200">- Elixir 1.11.4
  * Enhancements
    Elixir
    [Kernel] Update formatting when printing warnings and errors from Erlang/OTP 24+
    [Kernel] Support float-16 on bitstrings
    Mix
    [mix local.rebar] This task will now install rebar3 version 3.14.4, compiled with Erlang/OTP 21</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1623672000">- Elixir 1.12
  * Enhancements
    EEx
    [EEx.Engine] Add `c:EEx.Engine.handle_text/3` callback that receives text metadata
    [EEx.Engine] Emit warnings for unused "do" expression in EEx
    Elixir
    [Code] Add `Code.cursor_context/2` to return the context of a code snippet
    [Code] Do not add newlines around interpolation on code formatting.
    Note this means formatted code that has interpolation after the line length on Elixir v1.12 won't be considered as formatted on earlier Elixir versions
    [Code] Do not add brackets when keywords is used in the access syntax
    [Calendar] Support basic datetime format in `Calendar.ISO` parsing functions
    [Code] Improve evaluation performance on systems running on Erlang/OTP 24+
    [Date] Support steps via `Date.range/3`
    [DateTime] Add `offset` to `DateTime.to_iso8601/2` (now `to_iso8601/3`)
    [Enum] Add `Enum.count_until/2` and `Enum.count_until/3`
    [Enum] Add `Enum.product/1`
    [Enum] Add `Enum.zip_with/2`, `Enum.zip_with/3`, `Enum.zip_reduce/3`, and `Enum.zip_reduce/4`
    [Enum] Add support for functions as the second argument of `Enum.with_index/2`
    [Exception] Show `error_info` data for exceptions coming from Erlang
    [Float] Add `Float.pow/2`
    [Integer] Add `Integer.pow/2` and `Integer.extended_gcd/2`
    [IO] Add `IO.stream/0` and `IO.binstream/0` which default to STDIO with line orientation
    [List] Add default value for `List.first/1` and `List.last/1`
    [Kernel] Add `first..last//step` as support for stepped ranges
    [Kernel] Also warn for literal structs on `min/2` and `max/2`
    [Kernel] Add `Kernel.tap/2` and `Kernel.then/2`
    [Kernel] Do not add runtime dependencies to remotes in typespecs
    [Kernel] When there is an unused variable warning and there is a variable with the same name previously defined, suggest the user may have wanted to use the pin operator
    [Kernel] Improve error messages on invalid character right after a number
    [Kernel] Show removal and deprecated tips from Erlang/OTP
    [Macro] Add export dependencies on `Macro.struct!/2`
    [Macro] Support `:newline` to customize newlines escaping in `Macro.unescape_string/2`
    [Module] Raise on invalid `@dialyzer` attributes
    [Module] Add `Module.get_definition/2` and `Module.delete_definition/2`
    [Module] Allow `@on_load` to be a private function
    [Module] Validate `@dialyzer` related module attributes
    [Module] Add `Module.reserved_attributes/0` to list all reserved attributes by the language
    [Range] Add `Range.new/3` and `Range.size/1`
    [Regex] Add offset option to `Regex.scan/3` and `Regex.run/3`
    [Registry] Support `:compression` on `Registry` tables
    [Registry] Support `Registry.values/3` for reading values under a given key-pid pair
    [Stream] Add `Stream.zip_with/2` and `Stream.zip_with/3`
    [String] Add `:turkic` mode option to String case functions
    [String] Update to Unicode 13.0
    [System] Add `System.trap_signal/3` and `System.untrap_signal/2`
    [System] Add `System.shell/2` to invoke a command that is interpreted by the shell
    [Tuple] Add `Tuple.sum/1` and `Tuple.product/1`
    [URI] Support RFC3986 compliant encoding and decoding of queries via the `:rfc3986` option
    ExUnit
    [ExUnit] Intercept SIGQUIT (via Ctrl+\\) and show a list of all aborted tests as well as intermediate test results
    [ExUnit] Interpolate module attributes in match assertions diffs
    [ExUnit] Print how much time is spent on `async` vs `sync` tests
    [ExUnit] Improve error messages for doctests
    [ExUnit] Compile doctests faster (often by two times)
    [ExUnit] Add `ExUnit.async_run/0` and `ExUnit.await_run/1`
    IEx
    [IEx] Make IEx' parser configurable to allow special commands
    [IEx] Show function signature when pressing tab after the opening parens of a function
    [IEx] If an IEx expression starts with a binary operator, such as `|&gt;`, automatically pipe in the result of the last expression
    Mix
    [Mix] Add `Mix.install/2` for dynamically installing a list of dependencies
    [Mix] Support `:exit_code` option in `Mix.raise/2`
    [Mix] Discard `MIX_ENV` and `MIX_TARGET` values if they are empty strings
    [Mix] Print the time taken to execute a task with on `MIX_DEBUG=1`
    [mix compile.erlang] Compile multiple files in parallel
    [mix escript.build] Deep merge configuration and ensure argv is set when executing `config/runtime.exs`
    [mix release] Add `RELEASE_PROG` to releases with the name of the executable starting the release
    [mix release] Support `remote.vm.args` to customize how the connecting VM boots
    [mix test] Run all available tests if there are no pending `--failed` tests. This provides a better workflow as you no longer need to toggle the `--failed` flag between runs
  * Bug fixes
    Elixir
    [CLI] Ensure `-e ""` (with an empty string) parses correctly on Windows
    [Inspect] Do not override user supplied `:limit` option for derived implementations
    [Kernel] Allow heredoc inside a heredoc interpolation
    [Kernel] Preserve CRLF on heredocs
    [Kernel] Public functions without documentation now appear as an empty map on `Code.fetch_docs/1`,
    unless they start with underscore, where they remain as `:none`. This aligns Elixir's implementation with EEP48
    [Kernel] Do not crash when complex literals (binaries and maps) are used in guards
    [Kernel] Properly parse keywords (such as `end`) followed by the `::` operator
    [Kernel] Do not ignore unimplemented signatures from generated functions
    [Kernel] Improve error message when an expression follows a keyword list without brackets
    [Macro] `Macro.decompose_call/1` now also consider tuples with more than 2 elements to not be valid calls
    [Macro] Fix `Macro.to_string/1` double-escaping of escape characters in sigils
    [Macro] Fix `Macro.underscore/1` on digits preceded by capitals: "FOO10" now becomes "foo10" instead of "fo_o10"
    [Macro] Preserve underscores between digits on `Macro.underscore/1`
    [OptionParser] Properly parse when numbers follow-up aliases, for example, `-ab3` is now parsed as `-a -b 3`
    [Path] Fix `Path.relative_to/2` when referencing self
    [Path] Do not crash when a volume is given to `Path.absname/1`, such as "c:"
    [Task] Ensure `Task.async_stream/2` with `ordered: false` discard results as they are emitted, instead of needlessly accumulating inside the stream manager
    [Task] Raise if `:max_concurrency` is set to 0 on streaming operations
    [URI] Do not discard empty paths on `URI.merge/2`
    ExUnit
    [ExUnit.Case] Make `@tag tmp_dir` an absolute directory, avoiding inconsistencies if the test changes the current working directory
    [ExUnit.Diff] Fix cases where the diffing algorithm would fail to print a pattern correct
    IEx
    [IEx] Fix auto-completion inside remote shells
    Mix
    [mix app.config] Do not emit false positive warnings when configured dependencies that have `runtime: false` set
    [mix compile.elixir] Ensure that a manifest is generated even with no source code
    [mix compile.elixir] Make sure export dependencies trigger recompilation when the dependency is removed as well as when the whole file is removed
    [mix compile.elixir] Do not emit false positive warnings when a path dependency adds a module that is then used by the current application in the same `mix compile` cycle
    [mix test] Ensure protocols within the current project are consolidated when `--cover` is given
    [mix release] Improve compliance of release scripts with stripped down Linux installations
    [mix release] Preserve file mode when copying non-beam ebin files
    [mix xref] Ensure args are passed to the underlying `mix compile` call
  * Soft-deprecations (no warnings emitted)
    Elixir
    [Kernel] Using `first..last` to match on ranges is soft-deprecated and will warn on future Elixir versions. Use `first..last//step` instead
    [Kernel] Using `first..last` to create decreasing ranges is soft-deprecated and will warn on future versions. Use `first..last//-1` instead
  * Hard-deprecations
    EEx
    [EEx.Engine] `use EEx.Engine` is deprecated in favor of explicit delegation
    Elixir
    [Kernel] The binary operator `^^^` is deprecated. If you are using `Bitwise.^^^/2`, use `Bitwise.bxor/2` instead
    [Kernel] Deprecate `@foo()` in favor of `@foo`
    [System] Deprecate `System.stacktrace/0` (it was already deprecated outside of catch/rescue and now it is deprecated everywhere)
    Mix
    [mix compile] The `:xref` compiler is deprecated and it has no effect. Please remove it from your mix.exs file.
    Full release notes: https://github.com/elixir-lang/elixir/releases/tag/v1.12.0</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1623672001">- Elixir 1.12.1
  * Bug fixes
    Elixir
    [Code] Make sure `Code.format_string!/2` formats multiline expression inside interpolation on the first run
    [Macro] Revert keeping of underscores between digits in camelize
    Mix
    [Mix] Make sure `Mix.install/2` expand paths for deps
    [mix deps.get] Silence false positives on `httpc` warnings
    [mix test] Do not run the whole suite when there are no --failed tests as it won't behave as expected inside umbrellas</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1626091200">- Elixir 1.12.2
  * Bug fixes
    Elixir
    [Kernel] Ensure deprecated macros emit warnings
    Mix
    [mix deps] Ensure unconstrained rebar deps generate valid mix specifications
  * Enhancements
    Elixir
    [elixirc] Change the output of `--profile time` to make it easier to detect outliers
    [Application] Do not add compile time deps on args to `Application.compile_env/2` and `Application.compile_env!/2`
    [Enum] Optimize `Enum.into/3` and `Map.new/2`
    Mix
    [mix compile] Compile most recently changed files first
    [mix compile, mix run, mix test] Speed up the time taken to load dependencies. This should make the usage of Mix inside projects quite more responsive</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1632830400">- Elixir 1.12.3
  * Bug fixes
    Elixir
    [Code] Make sure that bindings in the default context returned by `Code.eval_*` functions are not returned as tagged tuples
    [Kernel] Do not crash when handling ambiguity errors
    [Range] Still match on old range patterns throughout the stdlib
    IEx
    [IEx.Autocomplete] Do not error autocompletion with module attribute
    Mix
    [Mix] Rename inconsistent `:exit_code` option to `:exit_status` on `Mix.raise/2`</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1636113600">- Add 0001-Add-retries-to-tests-that-write-to-stderr-on-Windows.patch:
  fix build for Factory</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1641470400">- Elixir 1.13.0
  * Enhancements
    EEx
    [EEx] Add `:parser_options` to EEx functions
    Elixir
    [Calendar] Add `c:Calendar.year_of_era/3` to support calendars where the beginning of a new era does not align with
    the beginning of a new year
    [CLI] Support `--short-version` on the CLI that does not boot the VM
    [Code] Add `Code.string_to_quoted_with_comments/2` and `Code.quoted_to_algebra/2`
    [Code] Add more `:token_metadata` to aliases and remote calls when parsing strings
    [Code] Add `Code.Fragment` module to provide best-effort information from code fragments.
    The module currently provides an updated `Code.Fragment.cursor_context/2` with operator support and
    `Code.Fragment.surround_context/2` which looks at a given position in a fragment and find its surrounding delimiters
    [Code] Allow custom sigil formatting on `Code.format_string!/2`
    [Code] Add `{:on_module, bytecode, :none}` trace to compilation tracers
    [Enum] Optimize `Enum.concat/1` for lists of lists
    [Enum] Add `Enum.slide/3`
    [Exception] Better format Elixir exceptions in Erlang
    [Inspect] Allow default inspect fun to be set globally with `Inspect.Opts.default_inspect_fun/1`
    [IO] Allow `:eof` to be given as limit to `IO.getn/2`
    [Kernel] Support the `:sigils` option in `import Mod, only: :sigils` and allow the sigil modifiers to be also digits
    [Kernel] Make `get_in` consistently abort and return `nil` when `nil` values are found (previously Elixir would raise
    an error in this case). This allows a user to use `get_in` as a safe navigation operator.
    [Kernel] Improve compilation times by reducing the amount of copies of the AST across compiler processes
    [Kernel] Raise if trying to define a module with a slash in its name
    [Kernel] Warn when `?\` is used and there is no need for a escape character
    [Kernel] Track structs in typespecs as export deps instead of compile-time deps
    [Kernel] Add power operator (`**/2`)
    [Keyword] Add `Keyword.validate/2`
    [Keyword] Implement `Keyword.filter/2` and `Keyword.map/2`
    [List] Add `List.keyfind!/3`
    [Macro] Add `Macro.prewalker/1` and `Macro.postwalker/1`
    [Macro.Env] Add the following reflection functions: `required?/2`, `lookup_import/2`, `fetch_alias/2`, and `fetch_macro_alias/2`
    [Map] Implement `Map.filter/2` and `Map.map/2`
    [Module] Support `:nillify_clauses` in `Module.get_definition/3`
    [Module] Add `Module.attributes_in/1` and `Module.overridables_in/1`
    [OptionParser] Add "did you mean?" suggestions to `OptionParser.ParseError` messages
    [Record] Add record reflection via `@__records__`
    [Task] Add `Task.completed/1`
    [Task] Add `Task.ignore/1` to keep a task running but ignoring all of its results
    [Task] Reduce the amount of copying `Task.async*` functions
    [URI] Add `URI.new/1` and `URI.new!/1`
    ExUnit
    [ExUnit] Show hint if comparing different but equivalent strings
    [ExUnit.CaptureIO] Add `with_io/3` to return result with captured io
    [ExUnit.CaptureLog] Add `with_log/2` to return result with captured logs
    IEx
    [IEx.Autocomplete] Add path autocompletion whenever when the cursor follows `"./` or `"/` or `"DRIVER:` where
    `DRIVER` is a single letter
    [IEx.Autocomplete] Add autocompletion for sigils, struct names, and struct fields
    [IEx.Helpers] Allow multiple modules to be given to `r/1`
    Logger
    [Logger] Add `Logger.put_application_level/2`
    [Logger] Print all log levels in accordance to Erlang/OTP. This also means `[warn]` is now shown as `[warning]`
    Mix
    [Mix] Add `MIX_INSTALL_FORCE` environment variable support
    [Mix] Support `:config` and `:system_env` in `Mix.install/2`
    [Mix] Add `Mix.installed?/0`
    [Mix.Shell] Add `:default` option to `Mix.Shell.yes?`
    [mix archive.install] Run `loadconfig` before building archive
    [mix compile] Move Elixir version check to before deps are compiled, in order to give feedback earlier
    [mix compile.elixir] Do not recompile files if their modification time change but their contents are still the same and the .beam files are still on disk
    [mix compile.elixir] Do not recompile all Elixir sources when Erlang modules change, only dependent ones
    [mix compile.elixir] Do not recompile Elixir files if `mix.exs` changes, instead recompile only files using `Mix.Project` or trigger a recompilation if a compiler option changes
    [mix compile.elixir] Only recompile needed files when a dependency is added, updated or removed
    [mix compile.elixir] Only recompile needed files when a dependency is configured
    [mix deps] Add `:subdir` option to git deps
    [mix escript.install] Run `loadconfig` before building escript
    [mix format] Support `:plugins` in `mix format` that can hook into custom extensions and sigils
    [mix format] Add `Mix.Tasks.Format.formatter_for_file/2`
    [mix local.rebar] No longer support `sub_dirs` in Rebar 2 to help migration towards Rebar 3
    [mix local.rebar] Support `--if-missing` option when installing Rebar
    [mix local.rebar] Set `REBAR_PROFILE=prod` when compiling Rebar dependencies
    [mix test] Support `--profile-require=time` to profile the time loading test files themselves
    [mix test] Allow filtering modules from coverage using regex
    [mix test] Allow the exit status of ExUnit to be configured and set the default to 2
    [mix test] Exit with a status of 3 when coverage falls below threshold
    [mix test] Write failed manifest when suite fails due to --warnings-as-errors
    [mix test] Ignore `MIX_TEST_PARTITION` when partitions set to 1
    [mix xref] Support multiple sinks and sources in `mix xref graph`
    [mix xref] Add `trace` subcommand to print compilation dependencies between files
    [mix xref] Add `--fail-above` option to `mix xref`
    [mix xref] Add `--label compile-connected` to `mix xref`
  * 2. Bug fixes
    EEx
    [EEx] Accept comments in EEx between do and the first clause
    [EEx] Accept EEx expressions where `-&gt;` is followed by newline
    Elixir
    [Application] Allow any expression as first argument of `compile_env`
    [Application] Warn if `Application.compile_env` or `Application.compile_env!` are called without a require
    [Code] Make sure `:static_atoms_encoder` in `Code.string_to_quoted/2` also applies to quoted keyword keys
    [Code] Ensure bindings with no context are returned as atoms instead of `{binding, nil}` in eval operations
    [Inspect] Fix a bug when inspecting a non-binary bitstring with colors
    [Kernel] Reject bidirectional formatting characters in strings and comments
    [Kernel] Support escaping of terminators in uppercase sigils heredocs for consistency
    [Kernel] Raise if `__CALLER__` or `__ENV__` or `__STACKTRACE__` are used in match
    [Kernel] Improve error message on invalid argument for `byte_size` from binary concat
    [Kernel] Raise when aliasing non-Elixir modules without `:as`
    [Kernel] Allow `unquote_splicing` inside `%{...}` without parens
    [Kernel] Ensure that waiting on a struct expansion inside a typespec is correctly tracked as waiting time in the compiler
    [Kernel] Correctly parse the atom `.` as a keyword list key
    [Kernel] Do not leak variables from the first generator in `with` and `for` special forms
    [Kernel] Fix column number on strings with NFD characters
    [Kernel] Fix a bug where a combination of dynamic line in `quote` with `unquote` of remote calls would emit invalid AST metadata
    [OptionParser] Validate switch types/modifiers early on to give more precise feedback
    [Protocol] Add `defdelegate` to the list of unallowed macros inside protocols as protocols do not allow function definitions
    [Protocol] Warn if `@callback`, `@macrocallback` and `@optional_callbacks` are defined inside protocol
    [Protocol] Ensure protocol metadata is deterministic on consolidation
    [Range] Always show step when range is descending
    [String] Update Unicode database to version 14.0
    [URI] Only percent decode if followed by hex digits (according to https://url.spec.whatwg.org/#percent-decode)
    [Version] Ensure proper precedence of `and`/`or` in version requirements
    ExUnit
    [ExUnit] Fix formatter and counters from `ExUnit.run/0` to consider all tests in a module whenever if a module's `setup_all` fails
    [ExUnit] Allow doctests newlines to be terminated by CRLF
    IEx
    [IEx] Fix the loss of `.iex.exs` context after a pry session
    [IEx] Stop evaluator before exiting IEx server to avoid evaluators leaking
    Logger
    [Logger] Raise clear error message for invalid `:compile_time_purge_matching` configuration
    [Logger] Fix a bug where Logger would not reset its discard counter under some scenarios
    Mix
    [mix compile.elixir] Track transitive runtime dependencies coming from local/path dependencies
    [mix compile.elixir] Recompile file if `@external_resource` is deleted
    [mix compile.elixir] Print number of compiling files on all compiler cycles. This will make the `Compiling N files (.ex)` show up multiple times if necessary
    [mix deps] Raise if local dep is unavailable while compiling
    [mix deps.unlock] Fix blank output when unlocking a dependency that is not locked
    [mix local.install] Do not respect `MIX_DEPS_PATH` for install commands
    [mix release] Improve release scripts by making sure shell errors cascade (this is done by avoiding exporting and defining variables in a single step)
    [mix release] Do not boot release if `RELEASE_COOKIE` is empty
    [mix release] Allow releases running as a daemon to be restarted
    [mix release] Raise proper error message when non-serializable values are in configs
    [mix test] Fix coverage engine to also tag `case`, `cond`, and `receive` branches where the right side is a literal
  * 3. Soft-deprecations (no warnings emitted)
    Elixir
    [Code] Environment options in `Code.eval_quoted/3` and `Code.eval_string/3`, such as `:aliases` and `:tracers`, have been deprecated in favor of passing an environment
    [IO] `:all` on `IO.getn` is deprecated in favor of `:eof`
    [URI] `URI.parse/1` is deprecated in favor of `URI.new/1` and `URI.new!/1`
    Mix
    [mix format] `Mix.Tasks.Format.formatter_opts_for_file/2` is deprecated in favor of `Mix.Tasks.Format.formatter_for_file/2`
  * 4. Hard-deprecations
    Elixir
    [Code] `Code.cursor_context/2` is deprecated, use `Code.Fragment.cursor_context/2` instead
    [Macro] `Macro.to_string/2` is deprecated, use `Macro.to_string/1` instead
    [System] `System.get_pid/0` is deprecated, use `System.pid/0` instead
    [Version] Using `!` or `!=` in version requirements is deprecated, use `~&gt;` or `&gt;=` instead
    Mix
    [mix escript.build] `:strip_beam` option is deprecated in favor of `:strip_beams`
    [Mix] `:exit_code` in `Mix.raise/2` has been deprecated in favor of `:exit_status`
    [Mix.Config] `Mix.Config` is deprecated in favor of `Config` module
  Full release notes: https://github.com/elixir-lang/elixir/releases/tag/v1.13.0
  - Drop 0001-Add-retries-to-tests-that-write-to-stderr-on-Windows.patch:
  upstreamed</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1641470401">- Elixir 1.13.1
  * 1. Bug fixes
    Elixir
    [Code] Do not show code snippets in `SyntaxError` and `TokenMissingError` if line is empty
    [Exception] Do not fail blaming `ArgumentError` for improper lists on `apply/3`
    [Macro] Set a max `line_length` for `Macro.to_string/1`
    [Macro] Fix formatting of lists on module attributes for `Macro.to_string/1`
    [String] Fix incorrect codepoint byte counting in `slice` with negative positions in ranges
    [Task] Ensure async streams can be consumed from another process than the one that creates them
    [URI] Undeprecate `URI.parse/1` as `URI.new/1` is too strict in many common cases
    [URI] Make sure `URI.new/1` returns nil for empty paths
    IEx
    [IEx] Make sure the `--version` flag halts IEx
    Mix
    [Mix] Make protocol consolidation part of the `Mix.install/2` cache</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1642161600">- Elixir 1.13.2
  * 1. Enhancements
    Mix
    [mix format] Allow plugins to also format .ex and .exs files
    [mix release] Allow bypassing application mode validation in release spec
    [mix test] Print a message when the suite fails due to the coverage threshold
  * 2. Bug fixes
    Elixir
    [Code] Do not emit warnings on Code.Fragment.container_cursor_to_quoted/2
    [Kernel] Fix a crash when a for-comprehension with :uniq was used inside another comprehension with :uniq
    [Kernel] Ensure env.context_modules is properly set inside optimized defmodule
    [Keyword] Deprecate the recently added Keyword.map/2 as it is equivalent to Keyword.new/2
    [Map] Deprecate the recently added Map.map/2 as it is equivalent to Map.new/2
    [Protocol] Warn on zero arity callbacks inside protocols</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1645531200">- Elixir 1.13.3
  * 1. Enhancements
    Mix
    [mix format] Supply file and line to formatter plugins
    [mix format] Support embedded Elixir expressions inside formatter plugins
  * 2. Bug fixes
    Elixir
    [Code] Fix duplicate bindings causing errors during evaluation
    [Kernel] Make sure signatures stored in the Documentation chunk does not contain newlines
    [Kernel] Fix infinite loop when compiling guards with recursive map access
    [Macro] Fix error on Macro.to_string/1 when the plain alias Elixir is given
    [String] Fix error for certain codepoint combinations in String.split_at/2
    Mix
    [mix compile] Recompile project files when exports from dependencies change
    [mix test] Fix total coverage always showing in red even when above the threshold</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1649505600">- Elixir 1.13.4
  * 1. Enhancements
    Elixir
    [Code] Allow iodata to be returned in sigil formatting functions
    [Code] Pass opening delimiter information to sigil formatting functions
  * 2. Bug fixes
    Elixir
    [Kernel] Tweak type unification to fix infinite loop with recursive vars
    [Kernel] Add compile-time dependencies on require
    [Registry] Make Registry send work with named triplets
  * 3. Deprecations
    Mix
    [mix rebar] Deprecate Rebar 2 as it no longer works on Erlang/OTP 25</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1662552000">- Elixir 1.14
  * 1. Enhancements
    EEx
    [EEx] Support multi-line comments to EEx via &lt;%!-- --%&gt;
    [EEx] Add EEx.tokenize/2
    Elixir
    [Access] Add Access.slice/1
    [Application] Add Application.compile_env/4 and Application.compile_env!/3 to read the compile-time environment inside macros
    [Calendar] Support ISO8601 basic format parsing with DateTime.from_iso8601/2
    [Calendar] Add day/hour/minute on add/diff across different calendar modules
    [Code] Add :normalize_bitstring_modifiers to Code.format_string!/2
    [Code] Emit deprecation and type warnings for invalid options in on Code.compile_string/2 and Code.compile_quoted/2
    [Code] Warn if an outdated lexical tracker is given on eval
    [Code] Add Code.env_for_eval/1 and Code.eval_quoted_with_env/3
    [Code] Improve stacktraces from eval operations on Erlang/OTP 25+
    [Code.Fragment] Add support for __MODULE__ in several functions
    [Code.Fragment] Support surround and context suggestions across multiple lines
    [Enum] Allow slicing with steps in Enum.slice/2
    [File] Support dereference_symlinks: true in File.cp/3 and File.cp_r/3
    [Float] Do not show floats in scientific notation if below 1.0e16 and the fractional value is precisely zero
    [Float] Add Float.min_finite/0 and Float.max_finite/0
    [Inspect] Improve error reporting when there is a faulty implementation of the Inspect protocol
    [Inspect] Allow :optional when deriving the Inspect protocol for hiding fields that match their default value
    [Inspect] Inspect struct fields in the order they are declared in defstruct
    [Inspect] Use expression-based inspection for Date.Range, MapSet, and Version.Requirement
    [IO] Support Macro.Env and keywords as stacktrace definitions in IO.warn/2
    [IO] Add IO.ANSI.syntax_colors/0 and related configuration to be shared across IEx and dbg
    [Kernel] Add new dbg/0-2 macro
    [Kernel] Allow any guard expression as the size of a bitstring in a pattern match
    [Kernel] Allow composite types with pins as the map key in a pattern match
    [Kernel] Print escaped version of control chars when they show up as unexpected tokens
    [Kernel] Warn on confusable non-ASCII identifiers
    [Kernel] Add .. as a nullary operator that returns 0..-1//1
    [Kernel] Implement Unicode Technical Standard #39 recommendations. In particular, we warn for confusable scripts and restrict identifiers to single-scripts or highly restrictive mixed-scripts
    [Kernel] Automatically perform NFC conversion of identifiers
    [Kernel] Add binary_slice/2 and binary_slice/3
    [Kernel] Lazily expand module attributes to avoid compile-time deps
    [Kernel] Automatically cascade generated: true annotations on macro expansion
    [Keyword] Add Keyword.from_keys/2 and Keyword.replace_lazy/3
    [List] Add List.keysort/3 with support for a sorter function
    [Macro] Add Macro.classify_atom/1 and Macro.inspect_atom/2
    [Macro] Add Macro.expand_literal/2 and Macro.path/2
    [Macro.Env] Add Macro.Env.prune_compile_info/1
    [Map] Add Map.from_keys/2 and Map.replace_lazy/3
    [MapSet] Add MapSet.filter/2, MapSet.reject/2, and MapSet.symmetric_difference/2
    [Node] Add Node.spawn_monitor/2 and Node.spawn_monitor/4
    [Module] Support new @after_verify attribute for executing code whenever a module is verified
    [PartitionSupervisor] Add PartitionSupervisor that starts multiple isolated partitions of the same child for scalability
    [Path] Add Path.safe_relative/1 and Path.safe_relative_to/2
    [Registry] Add Registry.count_select/2
    [Stream] Add Stream.duplicate/2 and Stream.transform/5
    [String] Support empty lookup lists in String.replace/3, String.split/3, and String.splitter/3
    [String] Allow slicing with steps in String.slice/2
    [Task] Add :zip_input_on_exit option to Task.async_stream/3
    [Task] Store :mfa in the Task struct for reflection purposes
    [URI] Add URI.append_query/2
    [Version] Add Version.to_string/1
    [Version] Colorize Version.Requirement source in the Inspect protocol
    ExUnit
    [ExUnit] Add ExUnit.Callbacks.start_link_supervised!/2
    [ExUnit] Add ExUnit.run/1 to rerun test modules
    [ExUnit] Colorize summary in yellow with message when all tests are excluded
    [ExUnit] Display friendly error when test name is too long
    IEx
    [IEx] Evaluate --dot-iex line by line
    [IEx] Add line-by-line evaluation of IEx breakpoints
    [IEx.Autocomplete] Autocomplete bitstrings modifiers (after :: inside &lt;&lt;...&gt;&gt;)
    [IEx.Helpers] Allow an atom to be given to pid/1
    [IEx.Helpers] Support sigils in h/1
    Logger
    [Logger] Add Logger.put_process_level/2
    Mix
    [Mix] Add :config_path and :lockfile options to Mix.install/2
    [mix compile] Add --no-optional-deps to skip optional dependencies to test compilation works without optional dependencies
    [mix compile] Include column information on error diagnostics when possible
    [mix deps] Mix.Dep.Converger now tells which deps formed a cycle
    [mix do] Support --app option to restrict recursive tasks in umbrella projects
    [mix do] Allow using + as a task separator instead of comma
    [mix format] Support filename in mix format - when reading from stdin
    [mix format] Compile if mix format plugins are missing
    [mix new] Do not allow projects to be created with application names that conflict with multi-arg Erlang VM switches
    [mix profile] Return the return value of the profiled function
    [mix release] Make BEAM compression opt-in
    [mix release] Let :runtime_config_path accept false to skip the config/runtime.exs
    [mix test] Improve error message when suite fails due to coverage
    [mix test] Support :test_elixirc_options and default to not generating docs nor debug info chunk for tests
    [mix xref] Support --group flag in mix xref graph
  * 2. Bug fixes
    Elixir
    [Calendar] Handle widths with "0" in them in Calendar.strftime/3
    [CLI] Improve errors on incorrect --rpc-eval usage
    [CLI] Return proper exit code on Windows
    [Code] Do not emit warnings when formatting code
    [Enum] Allow slices to overflow on both starting and ending positions
    [Kernel] Do not allow restricted characters in identifiers according to UTS39
    [Kernel] Define __exception__ field as true when expanding exceptions in typespecs
    [Kernel] Warn if any of True, False, and Nil aliases are used
    [Kernel] Warn on underived @derive attributes
    [Kernel] Remove compile-time dependency from defimpl :for
    [Kernel] Track all arities on imported functions
    [Kernel] Fix equality in guards for dynamic ranges without steps
    [Module] Fix loop while unifying type variables
    [Protocol] Warn if a protocol has no definitions
    [Regex] Show list options when inspecting a Regex manually defined with Regex.compile/2
    [String] Allow slices to overflow on both starting and ending positions
    [System] Raise non-generic exception on missing env in System.fetch_env!/1 to mirror map operations
    ExUnit
    [ExUnit] Do not crash when diffing unknown bindings in guards
    [ExUnit] Properly print diffs when comparing improper lists with strings at the tail position
    [ExUnit] Add short hash to tmp_dir in ExUnit to avoid test name collision
    [ExUnit] Do not store logs in the CLI formatter (this reduces memory usage for suites with capture_log)
    [ExUnit] Run ExUnit.after_suite/1 callback even when no tests run
    [ExUnit] Fix scenario where setup with imported function from within describe failed to compile
    IEx
    [IEx] Disallow short-hand pipe after matches
    [IEx] Fix exports/1 in IEx for long function names
    Mix
    [mix compile.elixir] Fix --warnings-as-errors when used with --all-warnings
    [mix compile.elixir] Ensure semantic recompilation cascades to path dependencies
    [mix compile.elixir] Lock the compiler to avoid concurrent usage
    [mix format] Do not add new lines if the formatted file is empty
    [mix format] Properly compile dependencies on mix format
    [mix release] Only set RELEASE_MODE after env.{sh,bat} are executed
    [mix release] Allow application mode configuration to cascade to dependencies
    [mix xref] Do not emit already consolidated warnings during mix xref trace
    [Mix] Do not start apps with runtime: false on Mix.install/2
  * 3. Soft deprecations (no warnings emitted)
    Elixir
    [File] Passing a callback as third argument to File.cp/3 and File.cp_r/3 is deprecated.
    Instead pass the callback the :on_conflict key of a keyword list
    EEx
    [EEx] Using &lt;%# ... %&gt; for comments is deprecated. Please use &lt;% # ... %&gt; or the new multi-line comments with &lt;%!-- ... --%&gt;
    Logger
    [Logger] Deprecate Logger.enable/1 and Logger.disable/1 in favor of Logger.put_process_level/2
    Mix
    [mix cmd] The --app option in mix cmd CMD is deprecated in favor of the more efficient mix do --app app cmd CMD
  * 4. Hard deprecations
    Elixir
    [Application] Calling Application.get_env/3 and friends in the module body is now discouraged, use Application.compile_env/3 instead
    [Bitwise] use Bitwise is deprecated, use import Bitwise instead
    [Bitwise] ~~~ is deprecated in favor of bnot for clarity
    [Kernel.ParallelCompiler] Returning a list or two-element tuple from :each_cycle is deprecated, return a {:compile | :runtime, modules, warnings} tuple instead
    [Kernel] Deprecate the operator &lt;|&gt; to avoid ambiguity with upcoming extended numerical operators
    [String] Deprecate passing a binary compiled pattern to String.starts_with?/2
    Logger
    [Logger] Deprecate $levelpad on message formatting
    Mix
    [Mix] Mix.Tasks.Xref.calls/1 is deprecated in favor of compilation tracers
  * 5. Backwards incompatible changes
    Mix
    [mix local.rebar] Remove support for rebar2, which has not been updated in 5 years, and is no longer supported on recent Erlang/OTP versions</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1673352000">- Elixir 1.14.2
  * 1. Enhancements
    Elixir
    [Code] Add Code.eval_quoted_with_env/4 with support for the :prune_binding option
    ExUnit
    [ExUnit.Case] Allow test cases to not be registered on use
    [ExUnit.DocTest] Include :doctest and :doctest_line as meta tags
    [ExUnit.Formatter] Expose ExUnit.Formatter.format_assertion_diff/4
    Mix
    [Mix] Mix.install/2 accepts atoms as paths
  * 2. Bug fixes
    Elixir
    [Code.Formatter] Fix size*unit shortcut in bitstring
    [Kernel] Generate unique variables for macro expansion of defguard
    [Protocol] Expand :for in protocols with the appropriate env
    ExUnit
    [ExUnit] Do not run duplicate cases on ExUnit.run/1
    Mix
    [mix test] Ensure proper error message when there is no test directory
- Elixir 1.14.1
  * 1. Enhancements
    Elixir
    [Kernel] Perform partial expansion of literals in module attributes
    [Kernel] Do not add compile-time dependencies for literals as defaults in Application.compile_env/3 inside module attributes
    [Macro] Add Macro.expand_literals/2 and Macro.expand_literals/3
    [System] Add :close_stdin to System.shell/2
    Mix
    [mix test] Accept --all-warnings option
  * 2. Bug fixes
    Elixir
    [Kernel] Fix misleading warning when :uniq is given in for comprehensions and the result is unused
    [Kernel] Improve error message for when there is a conflicting struct and ignoring module conflict
    [Kernel] Do not delete @enforce_keys attribute after defstruct declaration
    [Kernel] Do not crash the checker on modules with missing :debug_info chunk
    [Macro] Fix error in Macro.to_string/2 when converting an AST with :erlang.binary_to_atom/2
    [String] Fix String.split/3 and String.next_grapheme/1 returning invalid results on invalid UTF-8 encoding
    [System] Do not close stdin by default in System.shell/2
    [URI] Do not return uri.port as :undefined in certain cases in URI.new/1
    ExUnit
    [ExUnit.DocTest] Do not crash when both :moduledoc and functions are specified in :only
    IEx
    [CLI] Fix invalid argument handling when --no-pry is given
    Mix
    [mix format] Do not cache inputs from .formatter.exs so they are properly re-evaluted on every call</changelog>
  <changelog author="pirateclip@protonmail.com" date="1675771200">- Drop git as a requires and switch buildrequires from git to git-core
  * Git is not needed to use Elixir, only to run some tests
  (which git-core can accomplish on its own without git)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1699704000">- Update to Elixir 1.15.7:
  * Fix build for Erlang 26
  * Changelog available at https://hexdocs.pm/elixir/1.15.7/changelog.html
- Add 0001-Use-PID-valid-for-32-bit-systems-closes-12741.patch:
  * Fix build for 32bit
- Add 0001-Use-PID-valid-for-32-bit-systems-followup-to-12741-1.patch:
  * Fix build for 32bit</changelog>
  <changelog author="sflees@suse.de" date="1699876800">- Switch from %patch0 to %autosetup</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1700568000">- Use pregenerated documentation</changelog>
</package>
<package pkgid="34456704a2c98cd8ffb4176dcb60152a5122bdf3eca571f381f0751981f38748" name="elixir115" arch="src">
  <version epoch="0" ver="1.15.7" rel="150300.7.5.1"/>
  <changelog author="dev@mail.smarquardt.space" date="1604491200">- Elixir 1.11.2
  * Bug fixes
    Elixir
    [Code] Do not crash when getting docs for missing `erts` appdir
    [Kernel] Raise meaningful error if `:erlang.is_record` is used in guards
    [Kernel] Prune tracers when fetching `__ENV__` inside functions
    Mix
    [mix] Fix regression where aliases could not call themselves recursively
    [mix compile] Do not discard tracers that are set programatically</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1610366400">- Elixir 1.11.3
  * Enhancements
    Elixir
    [Macro] Add Macro.unique_var/2 and Macro.generate_unique_arguments/2
  * Bug fixes
    Elixir
    [Code] Do not raise when checking for operator ambiguity when :static_atoms_encoder is set in Code.string_to_quoted
    [Kernel] Emit undefined function warnings from with
    [Kernel] Do not fail type checking when literals are used in guards
    [Module] Do not warn for attributes used in @after_compile
    [Record] Make sure nested record names do not clobber each other
    ExUnit
    [ExUnit.Assertions] Do not crash if there are macros and module attributes on the left side of ++
    IEx
    [IEx.Helpers] Do not use Unicode chars if ANSI is disabled
    Mix
    [mix deps.compile] Fix compatibility with rebar v3.14
    [mix release] Do not use private ram_file:compress/1
    [mix xref] Do not crash when retrieving calls for modules in memory</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1616155200">- Elixir 1.11.4
  * Enhancements
    Elixir
    [Kernel] Update formatting when printing warnings and errors from Erlang/OTP 24+
    [Kernel] Support float-16 on bitstrings
    Mix
    [mix local.rebar] This task will now install rebar3 version 3.14.4, compiled with Erlang/OTP 21</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1623672000">- Elixir 1.12
  * Enhancements
    EEx
    [EEx.Engine] Add `c:EEx.Engine.handle_text/3` callback that receives text metadata
    [EEx.Engine] Emit warnings for unused "do" expression in EEx
    Elixir
    [Code] Add `Code.cursor_context/2` to return the context of a code snippet
    [Code] Do not add newlines around interpolation on code formatting.
    Note this means formatted code that has interpolation after the line length on Elixir v1.12 won't be considered as formatted on earlier Elixir versions
    [Code] Do not add brackets when keywords is used in the access syntax
    [Calendar] Support basic datetime format in `Calendar.ISO` parsing functions
    [Code] Improve evaluation performance on systems running on Erlang/OTP 24+
    [Date] Support steps via `Date.range/3`
    [DateTime] Add `offset` to `DateTime.to_iso8601/2` (now `to_iso8601/3`)
    [Enum] Add `Enum.count_until/2` and `Enum.count_until/3`
    [Enum] Add `Enum.product/1`
    [Enum] Add `Enum.zip_with/2`, `Enum.zip_with/3`, `Enum.zip_reduce/3`, and `Enum.zip_reduce/4`
    [Enum] Add support for functions as the second argument of `Enum.with_index/2`
    [Exception] Show `error_info` data for exceptions coming from Erlang
    [Float] Add `Float.pow/2`
    [Integer] Add `Integer.pow/2` and `Integer.extended_gcd/2`
    [IO] Add `IO.stream/0` and `IO.binstream/0` which default to STDIO with line orientation
    [List] Add default value for `List.first/1` and `List.last/1`
    [Kernel] Add `first..last//step` as support for stepped ranges
    [Kernel] Also warn for literal structs on `min/2` and `max/2`
    [Kernel] Add `Kernel.tap/2` and `Kernel.then/2`
    [Kernel] Do not add runtime dependencies to remotes in typespecs
    [Kernel] When there is an unused variable warning and there is a variable with the same name previously defined, suggest the user may have wanted to use the pin operator
    [Kernel] Improve error messages on invalid character right after a number
    [Kernel] Show removal and deprecated tips from Erlang/OTP
    [Macro] Add export dependencies on `Macro.struct!/2`
    [Macro] Support `:newline` to customize newlines escaping in `Macro.unescape_string/2`
    [Module] Raise on invalid `@dialyzer` attributes
    [Module] Add `Module.get_definition/2` and `Module.delete_definition/2`
    [Module] Allow `@on_load` to be a private function
    [Module] Validate `@dialyzer` related module attributes
    [Module] Add `Module.reserved_attributes/0` to list all reserved attributes by the language
    [Range] Add `Range.new/3` and `Range.size/1`
    [Regex] Add offset option to `Regex.scan/3` and `Regex.run/3`
    [Registry] Support `:compression` on `Registry` tables
    [Registry] Support `Registry.values/3` for reading values under a given key-pid pair
    [Stream] Add `Stream.zip_with/2` and `Stream.zip_with/3`
    [String] Add `:turkic` mode option to String case functions
    [String] Update to Unicode 13.0
    [System] Add `System.trap_signal/3` and `System.untrap_signal/2`
    [System] Add `System.shell/2` to invoke a command that is interpreted by the shell
    [Tuple] Add `Tuple.sum/1` and `Tuple.product/1`
    [URI] Support RFC3986 compliant encoding and decoding of queries via the `:rfc3986` option
    ExUnit
    [ExUnit] Intercept SIGQUIT (via Ctrl+\\) and show a list of all aborted tests as well as intermediate test results
    [ExUnit] Interpolate module attributes in match assertions diffs
    [ExUnit] Print how much time is spent on `async` vs `sync` tests
    [ExUnit] Improve error messages for doctests
    [ExUnit] Compile doctests faster (often by two times)
    [ExUnit] Add `ExUnit.async_run/0` and `ExUnit.await_run/1`
    IEx
    [IEx] Make IEx' parser configurable to allow special commands
    [IEx] Show function signature when pressing tab after the opening parens of a function
    [IEx] If an IEx expression starts with a binary operator, such as `|&gt;`, automatically pipe in the result of the last expression
    Mix
    [Mix] Add `Mix.install/2` for dynamically installing a list of dependencies
    [Mix] Support `:exit_code` option in `Mix.raise/2`
    [Mix] Discard `MIX_ENV` and `MIX_TARGET` values if they are empty strings
    [Mix] Print the time taken to execute a task with on `MIX_DEBUG=1`
    [mix compile.erlang] Compile multiple files in parallel
    [mix escript.build] Deep merge configuration and ensure argv is set when executing `config/runtime.exs`
    [mix release] Add `RELEASE_PROG` to releases with the name of the executable starting the release
    [mix release] Support `remote.vm.args` to customize how the connecting VM boots
    [mix test] Run all available tests if there are no pending `--failed` tests. This provides a better workflow as you no longer need to toggle the `--failed` flag between runs
  * Bug fixes
    Elixir
    [CLI] Ensure `-e ""` (with an empty string) parses correctly on Windows
    [Inspect] Do not override user supplied `:limit` option for derived implementations
    [Kernel] Allow heredoc inside a heredoc interpolation
    [Kernel] Preserve CRLF on heredocs
    [Kernel] Public functions without documentation now appear as an empty map on `Code.fetch_docs/1`,
    unless they start with underscore, where they remain as `:none`. This aligns Elixir's implementation with EEP48
    [Kernel] Do not crash when complex literals (binaries and maps) are used in guards
    [Kernel] Properly parse keywords (such as `end`) followed by the `::` operator
    [Kernel] Do not ignore unimplemented signatures from generated functions
    [Kernel] Improve error message when an expression follows a keyword list without brackets
    [Macro] `Macro.decompose_call/1` now also consider tuples with more than 2 elements to not be valid calls
    [Macro] Fix `Macro.to_string/1` double-escaping of escape characters in sigils
    [Macro] Fix `Macro.underscore/1` on digits preceded by capitals: "FOO10" now becomes "foo10" instead of "fo_o10"
    [Macro] Preserve underscores between digits on `Macro.underscore/1`
    [OptionParser] Properly parse when numbers follow-up aliases, for example, `-ab3` is now parsed as `-a -b 3`
    [Path] Fix `Path.relative_to/2` when referencing self
    [Path] Do not crash when a volume is given to `Path.absname/1`, such as "c:"
    [Task] Ensure `Task.async_stream/2` with `ordered: false` discard results as they are emitted, instead of needlessly accumulating inside the stream manager
    [Task] Raise if `:max_concurrency` is set to 0 on streaming operations
    [URI] Do not discard empty paths on `URI.merge/2`
    ExUnit
    [ExUnit.Case] Make `@tag tmp_dir` an absolute directory, avoiding inconsistencies if the test changes the current working directory
    [ExUnit.Diff] Fix cases where the diffing algorithm would fail to print a pattern correct
    IEx
    [IEx] Fix auto-completion inside remote shells
    Mix
    [mix app.config] Do not emit false positive warnings when configured dependencies that have `runtime: false` set
    [mix compile.elixir] Ensure that a manifest is generated even with no source code
    [mix compile.elixir] Make sure export dependencies trigger recompilation when the dependency is removed as well as when the whole file is removed
    [mix compile.elixir] Do not emit false positive warnings when a path dependency adds a module that is then used by the current application in the same `mix compile` cycle
    [mix test] Ensure protocols within the current project are consolidated when `--cover` is given
    [mix release] Improve compliance of release scripts with stripped down Linux installations
    [mix release] Preserve file mode when copying non-beam ebin files
    [mix xref] Ensure args are passed to the underlying `mix compile` call
  * Soft-deprecations (no warnings emitted)
    Elixir
    [Kernel] Using `first..last` to match on ranges is soft-deprecated and will warn on future Elixir versions. Use `first..last//step` instead
    [Kernel] Using `first..last` to create decreasing ranges is soft-deprecated and will warn on future versions. Use `first..last//-1` instead
  * Hard-deprecations
    EEx
    [EEx.Engine] `use EEx.Engine` is deprecated in favor of explicit delegation
    Elixir
    [Kernel] The binary operator `^^^` is deprecated. If you are using `Bitwise.^^^/2`, use `Bitwise.bxor/2` instead
    [Kernel] Deprecate `@foo()` in favor of `@foo`
    [System] Deprecate `System.stacktrace/0` (it was already deprecated outside of catch/rescue and now it is deprecated everywhere)
    Mix
    [mix compile] The `:xref` compiler is deprecated and it has no effect. Please remove it from your mix.exs file.
    Full release notes: https://github.com/elixir-lang/elixir/releases/tag/v1.12.0</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1623672001">- Elixir 1.12.1
  * Bug fixes
    Elixir
    [Code] Make sure `Code.format_string!/2` formats multiline expression inside interpolation on the first run
    [Macro] Revert keeping of underscores between digits in camelize
    Mix
    [Mix] Make sure `Mix.install/2` expand paths for deps
    [mix deps.get] Silence false positives on `httpc` warnings
    [mix test] Do not run the whole suite when there are no --failed tests as it won't behave as expected inside umbrellas</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1626091200">- Elixir 1.12.2
  * Bug fixes
    Elixir
    [Kernel] Ensure deprecated macros emit warnings
    Mix
    [mix deps] Ensure unconstrained rebar deps generate valid mix specifications
  * Enhancements
    Elixir
    [elixirc] Change the output of `--profile time` to make it easier to detect outliers
    [Application] Do not add compile time deps on args to `Application.compile_env/2` and `Application.compile_env!/2`
    [Enum] Optimize `Enum.into/3` and `Map.new/2`
    Mix
    [mix compile] Compile most recently changed files first
    [mix compile, mix run, mix test] Speed up the time taken to load dependencies. This should make the usage of Mix inside projects quite more responsive</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1632830400">- Elixir 1.12.3
  * Bug fixes
    Elixir
    [Code] Make sure that bindings in the default context returned by `Code.eval_*` functions are not returned as tagged tuples
    [Kernel] Do not crash when handling ambiguity errors
    [Range] Still match on old range patterns throughout the stdlib
    IEx
    [IEx.Autocomplete] Do not error autocompletion with module attribute
    Mix
    [Mix] Rename inconsistent `:exit_code` option to `:exit_status` on `Mix.raise/2`</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1636113600">- Add 0001-Add-retries-to-tests-that-write-to-stderr-on-Windows.patch:
  fix build for Factory</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1641470400">- Elixir 1.13.0
  * Enhancements
    EEx
    [EEx] Add `:parser_options` to EEx functions
    Elixir
    [Calendar] Add `c:Calendar.year_of_era/3` to support calendars where the beginning of a new era does not align with
    the beginning of a new year
    [CLI] Support `--short-version` on the CLI that does not boot the VM
    [Code] Add `Code.string_to_quoted_with_comments/2` and `Code.quoted_to_algebra/2`
    [Code] Add more `:token_metadata` to aliases and remote calls when parsing strings
    [Code] Add `Code.Fragment` module to provide best-effort information from code fragments.
    The module currently provides an updated `Code.Fragment.cursor_context/2` with operator support and
    `Code.Fragment.surround_context/2` which looks at a given position in a fragment and find its surrounding delimiters
    [Code] Allow custom sigil formatting on `Code.format_string!/2`
    [Code] Add `{:on_module, bytecode, :none}` trace to compilation tracers
    [Enum] Optimize `Enum.concat/1` for lists of lists
    [Enum] Add `Enum.slide/3`
    [Exception] Better format Elixir exceptions in Erlang
    [Inspect] Allow default inspect fun to be set globally with `Inspect.Opts.default_inspect_fun/1`
    [IO] Allow `:eof` to be given as limit to `IO.getn/2`
    [Kernel] Support the `:sigils` option in `import Mod, only: :sigils` and allow the sigil modifiers to be also digits
    [Kernel] Make `get_in` consistently abort and return `nil` when `nil` values are found (previously Elixir would raise
    an error in this case). This allows a user to use `get_in` as a safe navigation operator.
    [Kernel] Improve compilation times by reducing the amount of copies of the AST across compiler processes
    [Kernel] Raise if trying to define a module with a slash in its name
    [Kernel] Warn when `?\` is used and there is no need for a escape character
    [Kernel] Track structs in typespecs as export deps instead of compile-time deps
    [Kernel] Add power operator (`**/2`)
    [Keyword] Add `Keyword.validate/2`
    [Keyword] Implement `Keyword.filter/2` and `Keyword.map/2`
    [List] Add `List.keyfind!/3`
    [Macro] Add `Macro.prewalker/1` and `Macro.postwalker/1`
    [Macro.Env] Add the following reflection functions: `required?/2`, `lookup_import/2`, `fetch_alias/2`, and `fetch_macro_alias/2`
    [Map] Implement `Map.filter/2` and `Map.map/2`
    [Module] Support `:nillify_clauses` in `Module.get_definition/3`
    [Module] Add `Module.attributes_in/1` and `Module.overridables_in/1`
    [OptionParser] Add "did you mean?" suggestions to `OptionParser.ParseError` messages
    [Record] Add record reflection via `@__records__`
    [Task] Add `Task.completed/1`
    [Task] Add `Task.ignore/1` to keep a task running but ignoring all of its results
    [Task] Reduce the amount of copying `Task.async*` functions
    [URI] Add `URI.new/1` and `URI.new!/1`
    ExUnit
    [ExUnit] Show hint if comparing different but equivalent strings
    [ExUnit.CaptureIO] Add `with_io/3` to return result with captured io
    [ExUnit.CaptureLog] Add `with_log/2` to return result with captured logs
    IEx
    [IEx.Autocomplete] Add path autocompletion whenever when the cursor follows `"./` or `"/` or `"DRIVER:` where
    `DRIVER` is a single letter
    [IEx.Autocomplete] Add autocompletion for sigils, struct names, and struct fields
    [IEx.Helpers] Allow multiple modules to be given to `r/1`
    Logger
    [Logger] Add `Logger.put_application_level/2`
    [Logger] Print all log levels in accordance to Erlang/OTP. This also means `[warn]` is now shown as `[warning]`
    Mix
    [Mix] Add `MIX_INSTALL_FORCE` environment variable support
    [Mix] Support `:config` and `:system_env` in `Mix.install/2`
    [Mix] Add `Mix.installed?/0`
    [Mix.Shell] Add `:default` option to `Mix.Shell.yes?`
    [mix archive.install] Run `loadconfig` before building archive
    [mix compile] Move Elixir version check to before deps are compiled, in order to give feedback earlier
    [mix compile.elixir] Do not recompile files if their modification time change but their contents are still the same and the .beam files are still on disk
    [mix compile.elixir] Do not recompile all Elixir sources when Erlang modules change, only dependent ones
    [mix compile.elixir] Do not recompile Elixir files if `mix.exs` changes, instead recompile only files using `Mix.Project` or trigger a recompilation if a compiler option changes
    [mix compile.elixir] Only recompile needed files when a dependency is added, updated or removed
    [mix compile.elixir] Only recompile needed files when a dependency is configured
    [mix deps] Add `:subdir` option to git deps
    [mix escript.install] Run `loadconfig` before building escript
    [mix format] Support `:plugins` in `mix format` that can hook into custom extensions and sigils
    [mix format] Add `Mix.Tasks.Format.formatter_for_file/2`
    [mix local.rebar] No longer support `sub_dirs` in Rebar 2 to help migration towards Rebar 3
    [mix local.rebar] Support `--if-missing` option when installing Rebar
    [mix local.rebar] Set `REBAR_PROFILE=prod` when compiling Rebar dependencies
    [mix test] Support `--profile-require=time` to profile the time loading test files themselves
    [mix test] Allow filtering modules from coverage using regex
    [mix test] Allow the exit status of ExUnit to be configured and set the default to 2
    [mix test] Exit with a status of 3 when coverage falls below threshold
    [mix test] Write failed manifest when suite fails due to --warnings-as-errors
    [mix test] Ignore `MIX_TEST_PARTITION` when partitions set to 1
    [mix xref] Support multiple sinks and sources in `mix xref graph`
    [mix xref] Add `trace` subcommand to print compilation dependencies between files
    [mix xref] Add `--fail-above` option to `mix xref`
    [mix xref] Add `--label compile-connected` to `mix xref`
  * 2. Bug fixes
    EEx
    [EEx] Accept comments in EEx between do and the first clause
    [EEx] Accept EEx expressions where `-&gt;` is followed by newline
    Elixir
    [Application] Allow any expression as first argument of `compile_env`
    [Application] Warn if `Application.compile_env` or `Application.compile_env!` are called without a require
    [Code] Make sure `:static_atoms_encoder` in `Code.string_to_quoted/2` also applies to quoted keyword keys
    [Code] Ensure bindings with no context are returned as atoms instead of `{binding, nil}` in eval operations
    [Inspect] Fix a bug when inspecting a non-binary bitstring with colors
    [Kernel] Reject bidirectional formatting characters in strings and comments
    [Kernel] Support escaping of terminators in uppercase sigils heredocs for consistency
    [Kernel] Raise if `__CALLER__` or `__ENV__` or `__STACKTRACE__` are used in match
    [Kernel] Improve error message on invalid argument for `byte_size` from binary concat
    [Kernel] Raise when aliasing non-Elixir modules without `:as`
    [Kernel] Allow `unquote_splicing` inside `%{...}` without parens
    [Kernel] Ensure that waiting on a struct expansion inside a typespec is correctly tracked as waiting time in the compiler
    [Kernel] Correctly parse the atom `.` as a keyword list key
    [Kernel] Do not leak variables from the first generator in `with` and `for` special forms
    [Kernel] Fix column number on strings with NFD characters
    [Kernel] Fix a bug where a combination of dynamic line in `quote` with `unquote` of remote calls would emit invalid AST metadata
    [OptionParser] Validate switch types/modifiers early on to give more precise feedback
    [Protocol] Add `defdelegate` to the list of unallowed macros inside protocols as protocols do not allow function definitions
    [Protocol] Warn if `@callback`, `@macrocallback` and `@optional_callbacks` are defined inside protocol
    [Protocol] Ensure protocol metadata is deterministic on consolidation
    [Range] Always show step when range is descending
    [String] Update Unicode database to version 14.0
    [URI] Only percent decode if followed by hex digits (according to https://url.spec.whatwg.org/#percent-decode)
    [Version] Ensure proper precedence of `and`/`or` in version requirements
    ExUnit
    [ExUnit] Fix formatter and counters from `ExUnit.run/0` to consider all tests in a module whenever if a module's `setup_all` fails
    [ExUnit] Allow doctests newlines to be terminated by CRLF
    IEx
    [IEx] Fix the loss of `.iex.exs` context after a pry session
    [IEx] Stop evaluator before exiting IEx server to avoid evaluators leaking
    Logger
    [Logger] Raise clear error message for invalid `:compile_time_purge_matching` configuration
    [Logger] Fix a bug where Logger would not reset its discard counter under some scenarios
    Mix
    [mix compile.elixir] Track transitive runtime dependencies coming from local/path dependencies
    [mix compile.elixir] Recompile file if `@external_resource` is deleted
    [mix compile.elixir] Print number of compiling files on all compiler cycles. This will make the `Compiling N files (.ex)` show up multiple times if necessary
    [mix deps] Raise if local dep is unavailable while compiling
    [mix deps.unlock] Fix blank output when unlocking a dependency that is not locked
    [mix local.install] Do not respect `MIX_DEPS_PATH` for install commands
    [mix release] Improve release scripts by making sure shell errors cascade (this is done by avoiding exporting and defining variables in a single step)
    [mix release] Do not boot release if `RELEASE_COOKIE` is empty
    [mix release] Allow releases running as a daemon to be restarted
    [mix release] Raise proper error message when non-serializable values are in configs
    [mix test] Fix coverage engine to also tag `case`, `cond`, and `receive` branches where the right side is a literal
  * 3. Soft-deprecations (no warnings emitted)
    Elixir
    [Code] Environment options in `Code.eval_quoted/3` and `Code.eval_string/3`, such as `:aliases` and `:tracers`, have been deprecated in favor of passing an environment
    [IO] `:all` on `IO.getn` is deprecated in favor of `:eof`
    [URI] `URI.parse/1` is deprecated in favor of `URI.new/1` and `URI.new!/1`
    Mix
    [mix format] `Mix.Tasks.Format.formatter_opts_for_file/2` is deprecated in favor of `Mix.Tasks.Format.formatter_for_file/2`
  * 4. Hard-deprecations
    Elixir
    [Code] `Code.cursor_context/2` is deprecated, use `Code.Fragment.cursor_context/2` instead
    [Macro] `Macro.to_string/2` is deprecated, use `Macro.to_string/1` instead
    [System] `System.get_pid/0` is deprecated, use `System.pid/0` instead
    [Version] Using `!` or `!=` in version requirements is deprecated, use `~&gt;` or `&gt;=` instead
    Mix
    [mix escript.build] `:strip_beam` option is deprecated in favor of `:strip_beams`
    [Mix] `:exit_code` in `Mix.raise/2` has been deprecated in favor of `:exit_status`
    [Mix.Config] `Mix.Config` is deprecated in favor of `Config` module
  Full release notes: https://github.com/elixir-lang/elixir/releases/tag/v1.13.0
  - Drop 0001-Add-retries-to-tests-that-write-to-stderr-on-Windows.patch:
  upstreamed</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1641470401">- Elixir 1.13.1
  * 1. Bug fixes
    Elixir
    [Code] Do not show code snippets in `SyntaxError` and `TokenMissingError` if line is empty
    [Exception] Do not fail blaming `ArgumentError` for improper lists on `apply/3`
    [Macro] Set a max `line_length` for `Macro.to_string/1`
    [Macro] Fix formatting of lists on module attributes for `Macro.to_string/1`
    [String] Fix incorrect codepoint byte counting in `slice` with negative positions in ranges
    [Task] Ensure async streams can be consumed from another process than the one that creates them
    [URI] Undeprecate `URI.parse/1` as `URI.new/1` is too strict in many common cases
    [URI] Make sure `URI.new/1` returns nil for empty paths
    IEx
    [IEx] Make sure the `--version` flag halts IEx
    Mix
    [Mix] Make protocol consolidation part of the `Mix.install/2` cache</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1642161600">- Elixir 1.13.2
  * 1. Enhancements
    Mix
    [mix format] Allow plugins to also format .ex and .exs files
    [mix release] Allow bypassing application mode validation in release spec
    [mix test] Print a message when the suite fails due to the coverage threshold
  * 2. Bug fixes
    Elixir
    [Code] Do not emit warnings on Code.Fragment.container_cursor_to_quoted/2
    [Kernel] Fix a crash when a for-comprehension with :uniq was used inside another comprehension with :uniq
    [Kernel] Ensure env.context_modules is properly set inside optimized defmodule
    [Keyword] Deprecate the recently added Keyword.map/2 as it is equivalent to Keyword.new/2
    [Map] Deprecate the recently added Map.map/2 as it is equivalent to Map.new/2
    [Protocol] Warn on zero arity callbacks inside protocols</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1645531200">- Elixir 1.13.3
  * 1. Enhancements
    Mix
    [mix format] Supply file and line to formatter plugins
    [mix format] Support embedded Elixir expressions inside formatter plugins
  * 2. Bug fixes
    Elixir
    [Code] Fix duplicate bindings causing errors during evaluation
    [Kernel] Make sure signatures stored in the Documentation chunk does not contain newlines
    [Kernel] Fix infinite loop when compiling guards with recursive map access
    [Macro] Fix error on Macro.to_string/1 when the plain alias Elixir is given
    [String] Fix error for certain codepoint combinations in String.split_at/2
    Mix
    [mix compile] Recompile project files when exports from dependencies change
    [mix test] Fix total coverage always showing in red even when above the threshold</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1649505600">- Elixir 1.13.4
  * 1. Enhancements
    Elixir
    [Code] Allow iodata to be returned in sigil formatting functions
    [Code] Pass opening delimiter information to sigil formatting functions
  * 2. Bug fixes
    Elixir
    [Kernel] Tweak type unification to fix infinite loop with recursive vars
    [Kernel] Add compile-time dependencies on require
    [Registry] Make Registry send work with named triplets
  * 3. Deprecations
    Mix
    [mix rebar] Deprecate Rebar 2 as it no longer works on Erlang/OTP 25</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1662552000">- Elixir 1.14
  * 1. Enhancements
    EEx
    [EEx] Support multi-line comments to EEx via &lt;%!-- --%&gt;
    [EEx] Add EEx.tokenize/2
    Elixir
    [Access] Add Access.slice/1
    [Application] Add Application.compile_env/4 and Application.compile_env!/3 to read the compile-time environment inside macros
    [Calendar] Support ISO8601 basic format parsing with DateTime.from_iso8601/2
    [Calendar] Add day/hour/minute on add/diff across different calendar modules
    [Code] Add :normalize_bitstring_modifiers to Code.format_string!/2
    [Code] Emit deprecation and type warnings for invalid options in on Code.compile_string/2 and Code.compile_quoted/2
    [Code] Warn if an outdated lexical tracker is given on eval
    [Code] Add Code.env_for_eval/1 and Code.eval_quoted_with_env/3
    [Code] Improve stacktraces from eval operations on Erlang/OTP 25+
    [Code.Fragment] Add support for __MODULE__ in several functions
    [Code.Fragment] Support surround and context suggestions across multiple lines
    [Enum] Allow slicing with steps in Enum.slice/2
    [File] Support dereference_symlinks: true in File.cp/3 and File.cp_r/3
    [Float] Do not show floats in scientific notation if below 1.0e16 and the fractional value is precisely zero
    [Float] Add Float.min_finite/0 and Float.max_finite/0
    [Inspect] Improve error reporting when there is a faulty implementation of the Inspect protocol
    [Inspect] Allow :optional when deriving the Inspect protocol for hiding fields that match their default value
    [Inspect] Inspect struct fields in the order they are declared in defstruct
    [Inspect] Use expression-based inspection for Date.Range, MapSet, and Version.Requirement
    [IO] Support Macro.Env and keywords as stacktrace definitions in IO.warn/2
    [IO] Add IO.ANSI.syntax_colors/0 and related configuration to be shared across IEx and dbg
    [Kernel] Add new dbg/0-2 macro
    [Kernel] Allow any guard expression as the size of a bitstring in a pattern match
    [Kernel] Allow composite types with pins as the map key in a pattern match
    [Kernel] Print escaped version of control chars when they show up as unexpected tokens
    [Kernel] Warn on confusable non-ASCII identifiers
    [Kernel] Add .. as a nullary operator that returns 0..-1//1
    [Kernel] Implement Unicode Technical Standard #39 recommendations. In particular, we warn for confusable scripts and restrict identifiers to single-scripts or highly restrictive mixed-scripts
    [Kernel] Automatically perform NFC conversion of identifiers
    [Kernel] Add binary_slice/2 and binary_slice/3
    [Kernel] Lazily expand module attributes to avoid compile-time deps
    [Kernel] Automatically cascade generated: true annotations on macro expansion
    [Keyword] Add Keyword.from_keys/2 and Keyword.replace_lazy/3
    [List] Add List.keysort/3 with support for a sorter function
    [Macro] Add Macro.classify_atom/1 and Macro.inspect_atom/2
    [Macro] Add Macro.expand_literal/2 and Macro.path/2
    [Macro.Env] Add Macro.Env.prune_compile_info/1
    [Map] Add Map.from_keys/2 and Map.replace_lazy/3
    [MapSet] Add MapSet.filter/2, MapSet.reject/2, and MapSet.symmetric_difference/2
    [Node] Add Node.spawn_monitor/2 and Node.spawn_monitor/4
    [Module] Support new @after_verify attribute for executing code whenever a module is verified
    [PartitionSupervisor] Add PartitionSupervisor that starts multiple isolated partitions of the same child for scalability
    [Path] Add Path.safe_relative/1 and Path.safe_relative_to/2
    [Registry] Add Registry.count_select/2
    [Stream] Add Stream.duplicate/2 and Stream.transform/5
    [String] Support empty lookup lists in String.replace/3, String.split/3, and String.splitter/3
    [String] Allow slicing with steps in String.slice/2
    [Task] Add :zip_input_on_exit option to Task.async_stream/3
    [Task] Store :mfa in the Task struct for reflection purposes
    [URI] Add URI.append_query/2
    [Version] Add Version.to_string/1
    [Version] Colorize Version.Requirement source in the Inspect protocol
    ExUnit
    [ExUnit] Add ExUnit.Callbacks.start_link_supervised!/2
    [ExUnit] Add ExUnit.run/1 to rerun test modules
    [ExUnit] Colorize summary in yellow with message when all tests are excluded
    [ExUnit] Display friendly error when test name is too long
    IEx
    [IEx] Evaluate --dot-iex line by line
    [IEx] Add line-by-line evaluation of IEx breakpoints
    [IEx.Autocomplete] Autocomplete bitstrings modifiers (after :: inside &lt;&lt;...&gt;&gt;)
    [IEx.Helpers] Allow an atom to be given to pid/1
    [IEx.Helpers] Support sigils in h/1
    Logger
    [Logger] Add Logger.put_process_level/2
    Mix
    [Mix] Add :config_path and :lockfile options to Mix.install/2
    [mix compile] Add --no-optional-deps to skip optional dependencies to test compilation works without optional dependencies
    [mix compile] Include column information on error diagnostics when possible
    [mix deps] Mix.Dep.Converger now tells which deps formed a cycle
    [mix do] Support --app option to restrict recursive tasks in umbrella projects
    [mix do] Allow using + as a task separator instead of comma
    [mix format] Support filename in mix format - when reading from stdin
    [mix format] Compile if mix format plugins are missing
    [mix new] Do not allow projects to be created with application names that conflict with multi-arg Erlang VM switches
    [mix profile] Return the return value of the profiled function
    [mix release] Make BEAM compression opt-in
    [mix release] Let :runtime_config_path accept false to skip the config/runtime.exs
    [mix test] Improve error message when suite fails due to coverage
    [mix test] Support :test_elixirc_options and default to not generating docs nor debug info chunk for tests
    [mix xref] Support --group flag in mix xref graph
  * 2. Bug fixes
    Elixir
    [Calendar] Handle widths with "0" in them in Calendar.strftime/3
    [CLI] Improve errors on incorrect --rpc-eval usage
    [CLI] Return proper exit code on Windows
    [Code] Do not emit warnings when formatting code
    [Enum] Allow slices to overflow on both starting and ending positions
    [Kernel] Do not allow restricted characters in identifiers according to UTS39
    [Kernel] Define __exception__ field as true when expanding exceptions in typespecs
    [Kernel] Warn if any of True, False, and Nil aliases are used
    [Kernel] Warn on underived @derive attributes
    [Kernel] Remove compile-time dependency from defimpl :for
    [Kernel] Track all arities on imported functions
    [Kernel] Fix equality in guards for dynamic ranges without steps
    [Module] Fix loop while unifying type variables
    [Protocol] Warn if a protocol has no definitions
    [Regex] Show list options when inspecting a Regex manually defined with Regex.compile/2
    [String] Allow slices to overflow on both starting and ending positions
    [System] Raise non-generic exception on missing env in System.fetch_env!/1 to mirror map operations
    ExUnit
    [ExUnit] Do not crash when diffing unknown bindings in guards
    [ExUnit] Properly print diffs when comparing improper lists with strings at the tail position
    [ExUnit] Add short hash to tmp_dir in ExUnit to avoid test name collision
    [ExUnit] Do not store logs in the CLI formatter (this reduces memory usage for suites with capture_log)
    [ExUnit] Run ExUnit.after_suite/1 callback even when no tests run
    [ExUnit] Fix scenario where setup with imported function from within describe failed to compile
    IEx
    [IEx] Disallow short-hand pipe after matches
    [IEx] Fix exports/1 in IEx for long function names
    Mix
    [mix compile.elixir] Fix --warnings-as-errors when used with --all-warnings
    [mix compile.elixir] Ensure semantic recompilation cascades to path dependencies
    [mix compile.elixir] Lock the compiler to avoid concurrent usage
    [mix format] Do not add new lines if the formatted file is empty
    [mix format] Properly compile dependencies on mix format
    [mix release] Only set RELEASE_MODE after env.{sh,bat} are executed
    [mix release] Allow application mode configuration to cascade to dependencies
    [mix xref] Do not emit already consolidated warnings during mix xref trace
    [Mix] Do not start apps with runtime: false on Mix.install/2
  * 3. Soft deprecations (no warnings emitted)
    Elixir
    [File] Passing a callback as third argument to File.cp/3 and File.cp_r/3 is deprecated.
    Instead pass the callback the :on_conflict key of a keyword list
    EEx
    [EEx] Using &lt;%# ... %&gt; for comments is deprecated. Please use &lt;% # ... %&gt; or the new multi-line comments with &lt;%!-- ... --%&gt;
    Logger
    [Logger] Deprecate Logger.enable/1 and Logger.disable/1 in favor of Logger.put_process_level/2
    Mix
    [mix cmd] The --app option in mix cmd CMD is deprecated in favor of the more efficient mix do --app app cmd CMD
  * 4. Hard deprecations
    Elixir
    [Application] Calling Application.get_env/3 and friends in the module body is now discouraged, use Application.compile_env/3 instead
    [Bitwise] use Bitwise is deprecated, use import Bitwise instead
    [Bitwise] ~~~ is deprecated in favor of bnot for clarity
    [Kernel.ParallelCompiler] Returning a list or two-element tuple from :each_cycle is deprecated, return a {:compile | :runtime, modules, warnings} tuple instead
    [Kernel] Deprecate the operator &lt;|&gt; to avoid ambiguity with upcoming extended numerical operators
    [String] Deprecate passing a binary compiled pattern to String.starts_with?/2
    Logger
    [Logger] Deprecate $levelpad on message formatting
    Mix
    [Mix] Mix.Tasks.Xref.calls/1 is deprecated in favor of compilation tracers
  * 5. Backwards incompatible changes
    Mix
    [mix local.rebar] Remove support for rebar2, which has not been updated in 5 years, and is no longer supported on recent Erlang/OTP versions</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1673352000">- Elixir 1.14.2
  * 1. Enhancements
    Elixir
    [Code] Add Code.eval_quoted_with_env/4 with support for the :prune_binding option
    ExUnit
    [ExUnit.Case] Allow test cases to not be registered on use
    [ExUnit.DocTest] Include :doctest and :doctest_line as meta tags
    [ExUnit.Formatter] Expose ExUnit.Formatter.format_assertion_diff/4
    Mix
    [Mix] Mix.install/2 accepts atoms as paths
  * 2. Bug fixes
    Elixir
    [Code.Formatter] Fix size*unit shortcut in bitstring
    [Kernel] Generate unique variables for macro expansion of defguard
    [Protocol] Expand :for in protocols with the appropriate env
    ExUnit
    [ExUnit] Do not run duplicate cases on ExUnit.run/1
    Mix
    [mix test] Ensure proper error message when there is no test directory
- Elixir 1.14.1
  * 1. Enhancements
    Elixir
    [Kernel] Perform partial expansion of literals in module attributes
    [Kernel] Do not add compile-time dependencies for literals as defaults in Application.compile_env/3 inside module attributes
    [Macro] Add Macro.expand_literals/2 and Macro.expand_literals/3
    [System] Add :close_stdin to System.shell/2
    Mix
    [mix test] Accept --all-warnings option
  * 2. Bug fixes
    Elixir
    [Kernel] Fix misleading warning when :uniq is given in for comprehensions and the result is unused
    [Kernel] Improve error message for when there is a conflicting struct and ignoring module conflict
    [Kernel] Do not delete @enforce_keys attribute after defstruct declaration
    [Kernel] Do not crash the checker on modules with missing :debug_info chunk
    [Macro] Fix error in Macro.to_string/2 when converting an AST with :erlang.binary_to_atom/2
    [String] Fix String.split/3 and String.next_grapheme/1 returning invalid results on invalid UTF-8 encoding
    [System] Do not close stdin by default in System.shell/2
    [URI] Do not return uri.port as :undefined in certain cases in URI.new/1
    ExUnit
    [ExUnit.DocTest] Do not crash when both :moduledoc and functions are specified in :only
    IEx
    [CLI] Fix invalid argument handling when --no-pry is given
    Mix
    [mix format] Do not cache inputs from .formatter.exs so they are properly re-evaluted on every call</changelog>
  <changelog author="pirateclip@protonmail.com" date="1675771200">- Drop git as a requires and switch buildrequires from git to git-core
  * Git is not needed to use Elixir, only to run some tests
  (which git-core can accomplish on its own without git)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1699704000">- Update to Elixir 1.15.7:
  * Fix build for Erlang 26
  * Changelog available at https://hexdocs.pm/elixir/1.15.7/changelog.html
- Add 0001-Use-PID-valid-for-32-bit-systems-closes-12741.patch:
  * Fix build for 32bit
- Add 0001-Use-PID-valid-for-32-bit-systems-followup-to-12741-1.patch:
  * Fix build for 32bit</changelog>
  <changelog author="sflees@suse.de" date="1699876800">- Switch from %patch0 to %autosetup</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1700568000">- Use pregenerated documentation</changelog>
</package>
<package pkgid="2dc5cf8933075204aa767b018b08fe49df2e44c30e7586eb7fd6414410fc0bde" name="elixir115-doc" arch="noarch">
  <version epoch="0" ver="1.15.7" rel="150300.7.5.1"/>
  <changelog author="dev@mail.smarquardt.space" date="1604491200">- Elixir 1.11.2
  * Bug fixes
    Elixir
    [Code] Do not crash when getting docs for missing `erts` appdir
    [Kernel] Raise meaningful error if `:erlang.is_record` is used in guards
    [Kernel] Prune tracers when fetching `__ENV__` inside functions
    Mix
    [mix] Fix regression where aliases could not call themselves recursively
    [mix compile] Do not discard tracers that are set programatically</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1610366400">- Elixir 1.11.3
  * Enhancements
    Elixir
    [Macro] Add Macro.unique_var/2 and Macro.generate_unique_arguments/2
  * Bug fixes
    Elixir
    [Code] Do not raise when checking for operator ambiguity when :static_atoms_encoder is set in Code.string_to_quoted
    [Kernel] Emit undefined function warnings from with
    [Kernel] Do not fail type checking when literals are used in guards
    [Module] Do not warn for attributes used in @after_compile
    [Record] Make sure nested record names do not clobber each other
    ExUnit
    [ExUnit.Assertions] Do not crash if there are macros and module attributes on the left side of ++
    IEx
    [IEx.Helpers] Do not use Unicode chars if ANSI is disabled
    Mix
    [mix deps.compile] Fix compatibility with rebar v3.14
    [mix release] Do not use private ram_file:compress/1
    [mix xref] Do not crash when retrieving calls for modules in memory</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1616155200">- Elixir 1.11.4
  * Enhancements
    Elixir
    [Kernel] Update formatting when printing warnings and errors from Erlang/OTP 24+
    [Kernel] Support float-16 on bitstrings
    Mix
    [mix local.rebar] This task will now install rebar3 version 3.14.4, compiled with Erlang/OTP 21</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1623672000">- Elixir 1.12
  * Enhancements
    EEx
    [EEx.Engine] Add `c:EEx.Engine.handle_text/3` callback that receives text metadata
    [EEx.Engine] Emit warnings for unused "do" expression in EEx
    Elixir
    [Code] Add `Code.cursor_context/2` to return the context of a code snippet
    [Code] Do not add newlines around interpolation on code formatting.
    Note this means formatted code that has interpolation after the line length on Elixir v1.12 won't be considered as formatted on earlier Elixir versions
    [Code] Do not add brackets when keywords is used in the access syntax
    [Calendar] Support basic datetime format in `Calendar.ISO` parsing functions
    [Code] Improve evaluation performance on systems running on Erlang/OTP 24+
    [Date] Support steps via `Date.range/3`
    [DateTime] Add `offset` to `DateTime.to_iso8601/2` (now `to_iso8601/3`)
    [Enum] Add `Enum.count_until/2` and `Enum.count_until/3`
    [Enum] Add `Enum.product/1`
    [Enum] Add `Enum.zip_with/2`, `Enum.zip_with/3`, `Enum.zip_reduce/3`, and `Enum.zip_reduce/4`
    [Enum] Add support for functions as the second argument of `Enum.with_index/2`
    [Exception] Show `error_info` data for exceptions coming from Erlang
    [Float] Add `Float.pow/2`
    [Integer] Add `Integer.pow/2` and `Integer.extended_gcd/2`
    [IO] Add `IO.stream/0` and `IO.binstream/0` which default to STDIO with line orientation
    [List] Add default value for `List.first/1` and `List.last/1`
    [Kernel] Add `first..last//step` as support for stepped ranges
    [Kernel] Also warn for literal structs on `min/2` and `max/2`
    [Kernel] Add `Kernel.tap/2` and `Kernel.then/2`
    [Kernel] Do not add runtime dependencies to remotes in typespecs
    [Kernel] When there is an unused variable warning and there is a variable with the same name previously defined, suggest the user may have wanted to use the pin operator
    [Kernel] Improve error messages on invalid character right after a number
    [Kernel] Show removal and deprecated tips from Erlang/OTP
    [Macro] Add export dependencies on `Macro.struct!/2`
    [Macro] Support `:newline` to customize newlines escaping in `Macro.unescape_string/2`
    [Module] Raise on invalid `@dialyzer` attributes
    [Module] Add `Module.get_definition/2` and `Module.delete_definition/2`
    [Module] Allow `@on_load` to be a private function
    [Module] Validate `@dialyzer` related module attributes
    [Module] Add `Module.reserved_attributes/0` to list all reserved attributes by the language
    [Range] Add `Range.new/3` and `Range.size/1`
    [Regex] Add offset option to `Regex.scan/3` and `Regex.run/3`
    [Registry] Support `:compression` on `Registry` tables
    [Registry] Support `Registry.values/3` for reading values under a given key-pid pair
    [Stream] Add `Stream.zip_with/2` and `Stream.zip_with/3`
    [String] Add `:turkic` mode option to String case functions
    [String] Update to Unicode 13.0
    [System] Add `System.trap_signal/3` and `System.untrap_signal/2`
    [System] Add `System.shell/2` to invoke a command that is interpreted by the shell
    [Tuple] Add `Tuple.sum/1` and `Tuple.product/1`
    [URI] Support RFC3986 compliant encoding and decoding of queries via the `:rfc3986` option
    ExUnit
    [ExUnit] Intercept SIGQUIT (via Ctrl+\\) and show a list of all aborted tests as well as intermediate test results
    [ExUnit] Interpolate module attributes in match assertions diffs
    [ExUnit] Print how much time is spent on `async` vs `sync` tests
    [ExUnit] Improve error messages for doctests
    [ExUnit] Compile doctests faster (often by two times)
    [ExUnit] Add `ExUnit.async_run/0` and `ExUnit.await_run/1`
    IEx
    [IEx] Make IEx' parser configurable to allow special commands
    [IEx] Show function signature when pressing tab after the opening parens of a function
    [IEx] If an IEx expression starts with a binary operator, such as `|&gt;`, automatically pipe in the result of the last expression
    Mix
    [Mix] Add `Mix.install/2` for dynamically installing a list of dependencies
    [Mix] Support `:exit_code` option in `Mix.raise/2`
    [Mix] Discard `MIX_ENV` and `MIX_TARGET` values if they are empty strings
    [Mix] Print the time taken to execute a task with on `MIX_DEBUG=1`
    [mix compile.erlang] Compile multiple files in parallel
    [mix escript.build] Deep merge configuration and ensure argv is set when executing `config/runtime.exs`
    [mix release] Add `RELEASE_PROG` to releases with the name of the executable starting the release
    [mix release] Support `remote.vm.args` to customize how the connecting VM boots
    [mix test] Run all available tests if there are no pending `--failed` tests. This provides a better workflow as you no longer need to toggle the `--failed` flag between runs
  * Bug fixes
    Elixir
    [CLI] Ensure `-e ""` (with an empty string) parses correctly on Windows
    [Inspect] Do not override user supplied `:limit` option for derived implementations
    [Kernel] Allow heredoc inside a heredoc interpolation
    [Kernel] Preserve CRLF on heredocs
    [Kernel] Public functions without documentation now appear as an empty map on `Code.fetch_docs/1`,
    unless they start with underscore, where they remain as `:none`. This aligns Elixir's implementation with EEP48
    [Kernel] Do not crash when complex literals (binaries and maps) are used in guards
    [Kernel] Properly parse keywords (such as `end`) followed by the `::` operator
    [Kernel] Do not ignore unimplemented signatures from generated functions
    [Kernel] Improve error message when an expression follows a keyword list without brackets
    [Macro] `Macro.decompose_call/1` now also consider tuples with more than 2 elements to not be valid calls
    [Macro] Fix `Macro.to_string/1` double-escaping of escape characters in sigils
    [Macro] Fix `Macro.underscore/1` on digits preceded by capitals: "FOO10" now becomes "foo10" instead of "fo_o10"
    [Macro] Preserve underscores between digits on `Macro.underscore/1`
    [OptionParser] Properly parse when numbers follow-up aliases, for example, `-ab3` is now parsed as `-a -b 3`
    [Path] Fix `Path.relative_to/2` when referencing self
    [Path] Do not crash when a volume is given to `Path.absname/1`, such as "c:"
    [Task] Ensure `Task.async_stream/2` with `ordered: false` discard results as they are emitted, instead of needlessly accumulating inside the stream manager
    [Task] Raise if `:max_concurrency` is set to 0 on streaming operations
    [URI] Do not discard empty paths on `URI.merge/2`
    ExUnit
    [ExUnit.Case] Make `@tag tmp_dir` an absolute directory, avoiding inconsistencies if the test changes the current working directory
    [ExUnit.Diff] Fix cases where the diffing algorithm would fail to print a pattern correct
    IEx
    [IEx] Fix auto-completion inside remote shells
    Mix
    [mix app.config] Do not emit false positive warnings when configured dependencies that have `runtime: false` set
    [mix compile.elixir] Ensure that a manifest is generated even with no source code
    [mix compile.elixir] Make sure export dependencies trigger recompilation when the dependency is removed as well as when the whole file is removed
    [mix compile.elixir] Do not emit false positive warnings when a path dependency adds a module that is then used by the current application in the same `mix compile` cycle
    [mix test] Ensure protocols within the current project are consolidated when `--cover` is given
    [mix release] Improve compliance of release scripts with stripped down Linux installations
    [mix release] Preserve file mode when copying non-beam ebin files
    [mix xref] Ensure args are passed to the underlying `mix compile` call
  * Soft-deprecations (no warnings emitted)
    Elixir
    [Kernel] Using `first..last` to match on ranges is soft-deprecated and will warn on future Elixir versions. Use `first..last//step` instead
    [Kernel] Using `first..last` to create decreasing ranges is soft-deprecated and will warn on future versions. Use `first..last//-1` instead
  * Hard-deprecations
    EEx
    [EEx.Engine] `use EEx.Engine` is deprecated in favor of explicit delegation
    Elixir
    [Kernel] The binary operator `^^^` is deprecated. If you are using `Bitwise.^^^/2`, use `Bitwise.bxor/2` instead
    [Kernel] Deprecate `@foo()` in favor of `@foo`
    [System] Deprecate `System.stacktrace/0` (it was already deprecated outside of catch/rescue and now it is deprecated everywhere)
    Mix
    [mix compile] The `:xref` compiler is deprecated and it has no effect. Please remove it from your mix.exs file.
    Full release notes: https://github.com/elixir-lang/elixir/releases/tag/v1.12.0</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1623672001">- Elixir 1.12.1
  * Bug fixes
    Elixir
    [Code] Make sure `Code.format_string!/2` formats multiline expression inside interpolation on the first run
    [Macro] Revert keeping of underscores between digits in camelize
    Mix
    [Mix] Make sure `Mix.install/2` expand paths for deps
    [mix deps.get] Silence false positives on `httpc` warnings
    [mix test] Do not run the whole suite when there are no --failed tests as it won't behave as expected inside umbrellas</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1626091200">- Elixir 1.12.2
  * Bug fixes
    Elixir
    [Kernel] Ensure deprecated macros emit warnings
    Mix
    [mix deps] Ensure unconstrained rebar deps generate valid mix specifications
  * Enhancements
    Elixir
    [elixirc] Change the output of `--profile time` to make it easier to detect outliers
    [Application] Do not add compile time deps on args to `Application.compile_env/2` and `Application.compile_env!/2`
    [Enum] Optimize `Enum.into/3` and `Map.new/2`
    Mix
    [mix compile] Compile most recently changed files first
    [mix compile, mix run, mix test] Speed up the time taken to load dependencies. This should make the usage of Mix inside projects quite more responsive</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1632830400">- Elixir 1.12.3
  * Bug fixes
    Elixir
    [Code] Make sure that bindings in the default context returned by `Code.eval_*` functions are not returned as tagged tuples
    [Kernel] Do not crash when handling ambiguity errors
    [Range] Still match on old range patterns throughout the stdlib
    IEx
    [IEx.Autocomplete] Do not error autocompletion with module attribute
    Mix
    [Mix] Rename inconsistent `:exit_code` option to `:exit_status` on `Mix.raise/2`</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1636113600">- Add 0001-Add-retries-to-tests-that-write-to-stderr-on-Windows.patch:
  fix build for Factory</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1641470400">- Elixir 1.13.0
  * Enhancements
    EEx
    [EEx] Add `:parser_options` to EEx functions
    Elixir
    [Calendar] Add `c:Calendar.year_of_era/3` to support calendars where the beginning of a new era does not align with
    the beginning of a new year
    [CLI] Support `--short-version` on the CLI that does not boot the VM
    [Code] Add `Code.string_to_quoted_with_comments/2` and `Code.quoted_to_algebra/2`
    [Code] Add more `:token_metadata` to aliases and remote calls when parsing strings
    [Code] Add `Code.Fragment` module to provide best-effort information from code fragments.
    The module currently provides an updated `Code.Fragment.cursor_context/2` with operator support and
    `Code.Fragment.surround_context/2` which looks at a given position in a fragment and find its surrounding delimiters
    [Code] Allow custom sigil formatting on `Code.format_string!/2`
    [Code] Add `{:on_module, bytecode, :none}` trace to compilation tracers
    [Enum] Optimize `Enum.concat/1` for lists of lists
    [Enum] Add `Enum.slide/3`
    [Exception] Better format Elixir exceptions in Erlang
    [Inspect] Allow default inspect fun to be set globally with `Inspect.Opts.default_inspect_fun/1`
    [IO] Allow `:eof` to be given as limit to `IO.getn/2`
    [Kernel] Support the `:sigils` option in `import Mod, only: :sigils` and allow the sigil modifiers to be also digits
    [Kernel] Make `get_in` consistently abort and return `nil` when `nil` values are found (previously Elixir would raise
    an error in this case). This allows a user to use `get_in` as a safe navigation operator.
    [Kernel] Improve compilation times by reducing the amount of copies of the AST across compiler processes
    [Kernel] Raise if trying to define a module with a slash in its name
    [Kernel] Warn when `?\` is used and there is no need for a escape character
    [Kernel] Track structs in typespecs as export deps instead of compile-time deps
    [Kernel] Add power operator (`**/2`)
    [Keyword] Add `Keyword.validate/2`
    [Keyword] Implement `Keyword.filter/2` and `Keyword.map/2`
    [List] Add `List.keyfind!/3`
    [Macro] Add `Macro.prewalker/1` and `Macro.postwalker/1`
    [Macro.Env] Add the following reflection functions: `required?/2`, `lookup_import/2`, `fetch_alias/2`, and `fetch_macro_alias/2`
    [Map] Implement `Map.filter/2` and `Map.map/2`
    [Module] Support `:nillify_clauses` in `Module.get_definition/3`
    [Module] Add `Module.attributes_in/1` and `Module.overridables_in/1`
    [OptionParser] Add "did you mean?" suggestions to `OptionParser.ParseError` messages
    [Record] Add record reflection via `@__records__`
    [Task] Add `Task.completed/1`
    [Task] Add `Task.ignore/1` to keep a task running but ignoring all of its results
    [Task] Reduce the amount of copying `Task.async*` functions
    [URI] Add `URI.new/1` and `URI.new!/1`
    ExUnit
    [ExUnit] Show hint if comparing different but equivalent strings
    [ExUnit.CaptureIO] Add `with_io/3` to return result with captured io
    [ExUnit.CaptureLog] Add `with_log/2` to return result with captured logs
    IEx
    [IEx.Autocomplete] Add path autocompletion whenever when the cursor follows `"./` or `"/` or `"DRIVER:` where
    `DRIVER` is a single letter
    [IEx.Autocomplete] Add autocompletion for sigils, struct names, and struct fields
    [IEx.Helpers] Allow multiple modules to be given to `r/1`
    Logger
    [Logger] Add `Logger.put_application_level/2`
    [Logger] Print all log levels in accordance to Erlang/OTP. This also means `[warn]` is now shown as `[warning]`
    Mix
    [Mix] Add `MIX_INSTALL_FORCE` environment variable support
    [Mix] Support `:config` and `:system_env` in `Mix.install/2`
    [Mix] Add `Mix.installed?/0`
    [Mix.Shell] Add `:default` option to `Mix.Shell.yes?`
    [mix archive.install] Run `loadconfig` before building archive
    [mix compile] Move Elixir version check to before deps are compiled, in order to give feedback earlier
    [mix compile.elixir] Do not recompile files if their modification time change but their contents are still the same and the .beam files are still on disk
    [mix compile.elixir] Do not recompile all Elixir sources when Erlang modules change, only dependent ones
    [mix compile.elixir] Do not recompile Elixir files if `mix.exs` changes, instead recompile only files using `Mix.Project` or trigger a recompilation if a compiler option changes
    [mix compile.elixir] Only recompile needed files when a dependency is added, updated or removed
    [mix compile.elixir] Only recompile needed files when a dependency is configured
    [mix deps] Add `:subdir` option to git deps
    [mix escript.install] Run `loadconfig` before building escript
    [mix format] Support `:plugins` in `mix format` that can hook into custom extensions and sigils
    [mix format] Add `Mix.Tasks.Format.formatter_for_file/2`
    [mix local.rebar] No longer support `sub_dirs` in Rebar 2 to help migration towards Rebar 3
    [mix local.rebar] Support `--if-missing` option when installing Rebar
    [mix local.rebar] Set `REBAR_PROFILE=prod` when compiling Rebar dependencies
    [mix test] Support `--profile-require=time` to profile the time loading test files themselves
    [mix test] Allow filtering modules from coverage using regex
    [mix test] Allow the exit status of ExUnit to be configured and set the default to 2
    [mix test] Exit with a status of 3 when coverage falls below threshold
    [mix test] Write failed manifest when suite fails due to --warnings-as-errors
    [mix test] Ignore `MIX_TEST_PARTITION` when partitions set to 1
    [mix xref] Support multiple sinks and sources in `mix xref graph`
    [mix xref] Add `trace` subcommand to print compilation dependencies between files
    [mix xref] Add `--fail-above` option to `mix xref`
    [mix xref] Add `--label compile-connected` to `mix xref`
  * 2. Bug fixes
    EEx
    [EEx] Accept comments in EEx between do and the first clause
    [EEx] Accept EEx expressions where `-&gt;` is followed by newline
    Elixir
    [Application] Allow any expression as first argument of `compile_env`
    [Application] Warn if `Application.compile_env` or `Application.compile_env!` are called without a require
    [Code] Make sure `:static_atoms_encoder` in `Code.string_to_quoted/2` also applies to quoted keyword keys
    [Code] Ensure bindings with no context are returned as atoms instead of `{binding, nil}` in eval operations
    [Inspect] Fix a bug when inspecting a non-binary bitstring with colors
    [Kernel] Reject bidirectional formatting characters in strings and comments
    [Kernel] Support escaping of terminators in uppercase sigils heredocs for consistency
    [Kernel] Raise if `__CALLER__` or `__ENV__` or `__STACKTRACE__` are used in match
    [Kernel] Improve error message on invalid argument for `byte_size` from binary concat
    [Kernel] Raise when aliasing non-Elixir modules without `:as`
    [Kernel] Allow `unquote_splicing` inside `%{...}` without parens
    [Kernel] Ensure that waiting on a struct expansion inside a typespec is correctly tracked as waiting time in the compiler
    [Kernel] Correctly parse the atom `.` as a keyword list key
    [Kernel] Do not leak variables from the first generator in `with` and `for` special forms
    [Kernel] Fix column number on strings with NFD characters
    [Kernel] Fix a bug where a combination of dynamic line in `quote` with `unquote` of remote calls would emit invalid AST metadata
    [OptionParser] Validate switch types/modifiers early on to give more precise feedback
    [Protocol] Add `defdelegate` to the list of unallowed macros inside protocols as protocols do not allow function definitions
    [Protocol] Warn if `@callback`, `@macrocallback` and `@optional_callbacks` are defined inside protocol
    [Protocol] Ensure protocol metadata is deterministic on consolidation
    [Range] Always show step when range is descending
    [String] Update Unicode database to version 14.0
    [URI] Only percent decode if followed by hex digits (according to https://url.spec.whatwg.org/#percent-decode)
    [Version] Ensure proper precedence of `and`/`or` in version requirements
    ExUnit
    [ExUnit] Fix formatter and counters from `ExUnit.run/0` to consider all tests in a module whenever if a module's `setup_all` fails
    [ExUnit] Allow doctests newlines to be terminated by CRLF
    IEx
    [IEx] Fix the loss of `.iex.exs` context after a pry session
    [IEx] Stop evaluator before exiting IEx server to avoid evaluators leaking
    Logger
    [Logger] Raise clear error message for invalid `:compile_time_purge_matching` configuration
    [Logger] Fix a bug where Logger would not reset its discard counter under some scenarios
    Mix
    [mix compile.elixir] Track transitive runtime dependencies coming from local/path dependencies
    [mix compile.elixir] Recompile file if `@external_resource` is deleted
    [mix compile.elixir] Print number of compiling files on all compiler cycles. This will make the `Compiling N files (.ex)` show up multiple times if necessary
    [mix deps] Raise if local dep is unavailable while compiling
    [mix deps.unlock] Fix blank output when unlocking a dependency that is not locked
    [mix local.install] Do not respect `MIX_DEPS_PATH` for install commands
    [mix release] Improve release scripts by making sure shell errors cascade (this is done by avoiding exporting and defining variables in a single step)
    [mix release] Do not boot release if `RELEASE_COOKIE` is empty
    [mix release] Allow releases running as a daemon to be restarted
    [mix release] Raise proper error message when non-serializable values are in configs
    [mix test] Fix coverage engine to also tag `case`, `cond`, and `receive` branches where the right side is a literal
  * 3. Soft-deprecations (no warnings emitted)
    Elixir
    [Code] Environment options in `Code.eval_quoted/3` and `Code.eval_string/3`, such as `:aliases` and `:tracers`, have been deprecated in favor of passing an environment
    [IO] `:all` on `IO.getn` is deprecated in favor of `:eof`
    [URI] `URI.parse/1` is deprecated in favor of `URI.new/1` and `URI.new!/1`
    Mix
    [mix format] `Mix.Tasks.Format.formatter_opts_for_file/2` is deprecated in favor of `Mix.Tasks.Format.formatter_for_file/2`
  * 4. Hard-deprecations
    Elixir
    [Code] `Code.cursor_context/2` is deprecated, use `Code.Fragment.cursor_context/2` instead
    [Macro] `Macro.to_string/2` is deprecated, use `Macro.to_string/1` instead
    [System] `System.get_pid/0` is deprecated, use `System.pid/0` instead
    [Version] Using `!` or `!=` in version requirements is deprecated, use `~&gt;` or `&gt;=` instead
    Mix
    [mix escript.build] `:strip_beam` option is deprecated in favor of `:strip_beams`
    [Mix] `:exit_code` in `Mix.raise/2` has been deprecated in favor of `:exit_status`
    [Mix.Config] `Mix.Config` is deprecated in favor of `Config` module
  Full release notes: https://github.com/elixir-lang/elixir/releases/tag/v1.13.0
  - Drop 0001-Add-retries-to-tests-that-write-to-stderr-on-Windows.patch:
  upstreamed</changelog>
  <changelog author="dev@mail.smarquardt.space" date="1641470401">- Elixir 1.13.1
  * 1. Bug fixes
    Elixir
    [Code] Do not show code snippets in `SyntaxError` and `TokenMissingError` if line is empty
    [Exception] Do not fail blaming `ArgumentError` for improper lists on `apply/3`
    [Macro] Set a max `line_length` for `Macro.to_string/1`
    [Macro] Fix formatting of lists on module attributes for `Macro.to_string/1`
    [String] Fix incorrect codepoint byte counting in `slice` with negative positions in ranges
    [Task] Ensure async streams can be consumed from another process than the one that creates them
    [URI] Undeprecate `URI.parse/1` as `URI.new/1` is too strict in many common cases
    [URI] Make sure `URI.new/1` returns nil for empty paths
    IEx
    [IEx] Make sure the `--version` flag halts IEx
    Mix
    [Mix] Make protocol consolidation part of the `Mix.install/2` cache</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1642161600">- Elixir 1.13.2
  * 1. Enhancements
    Mix
    [mix format] Allow plugins to also format .ex and .exs files
    [mix release] Allow bypassing application mode validation in release spec
    [mix test] Print a message when the suite fails due to the coverage threshold
  * 2. Bug fixes
    Elixir
    [Code] Do not emit warnings on Code.Fragment.container_cursor_to_quoted/2
    [Kernel] Fix a crash when a for-comprehension with :uniq was used inside another comprehension with :uniq
    [Kernel] Ensure env.context_modules is properly set inside optimized defmodule
    [Keyword] Deprecate the recently added Keyword.map/2 as it is equivalent to Keyword.new/2
    [Map] Deprecate the recently added Map.map/2 as it is equivalent to Map.new/2
    [Protocol] Warn on zero arity callbacks inside protocols</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1645531200">- Elixir 1.13.3
  * 1. Enhancements
    Mix
    [mix format] Supply file and line to formatter plugins
    [mix format] Support embedded Elixir expressions inside formatter plugins
  * 2. Bug fixes
    Elixir
    [Code] Fix duplicate bindings causing errors during evaluation
    [Kernel] Make sure signatures stored in the Documentation chunk does not contain newlines
    [Kernel] Fix infinite loop when compiling guards with recursive map access
    [Macro] Fix error on Macro.to_string/1 when the plain alias Elixir is given
    [String] Fix error for certain codepoint combinations in String.split_at/2
    Mix
    [mix compile] Recompile project files when exports from dependencies change
    [mix test] Fix total coverage always showing in red even when above the threshold</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1649505600">- Elixir 1.13.4
  * 1. Enhancements
    Elixir
    [Code] Allow iodata to be returned in sigil formatting functions
    [Code] Pass opening delimiter information to sigil formatting functions
  * 2. Bug fixes
    Elixir
    [Kernel] Tweak type unification to fix infinite loop with recursive vars
    [Kernel] Add compile-time dependencies on require
    [Registry] Make Registry send work with named triplets
  * 3. Deprecations
    Mix
    [mix rebar] Deprecate Rebar 2 as it no longer works on Erlang/OTP 25</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1662552000">- Elixir 1.14
  * 1. Enhancements
    EEx
    [EEx] Support multi-line comments to EEx via &lt;%!-- --%&gt;
    [EEx] Add EEx.tokenize/2
    Elixir
    [Access] Add Access.slice/1
    [Application] Add Application.compile_env/4 and Application.compile_env!/3 to read the compile-time environment inside macros
    [Calendar] Support ISO8601 basic format parsing with DateTime.from_iso8601/2
    [Calendar] Add day/hour/minute on add/diff across different calendar modules
    [Code] Add :normalize_bitstring_modifiers to Code.format_string!/2
    [Code] Emit deprecation and type warnings for invalid options in on Code.compile_string/2 and Code.compile_quoted/2
    [Code] Warn if an outdated lexical tracker is given on eval
    [Code] Add Code.env_for_eval/1 and Code.eval_quoted_with_env/3
    [Code] Improve stacktraces from eval operations on Erlang/OTP 25+
    [Code.Fragment] Add support for __MODULE__ in several functions
    [Code.Fragment] Support surround and context suggestions across multiple lines
    [Enum] Allow slicing with steps in Enum.slice/2
    [File] Support dereference_symlinks: true in File.cp/3 and File.cp_r/3
    [Float] Do not show floats in scientific notation if below 1.0e16 and the fractional value is precisely zero
    [Float] Add Float.min_finite/0 and Float.max_finite/0
    [Inspect] Improve error reporting when there is a faulty implementation of the Inspect protocol
    [Inspect] Allow :optional when deriving the Inspect protocol for hiding fields that match their default value
    [Inspect] Inspect struct fields in the order they are declared in defstruct
    [Inspect] Use expression-based inspection for Date.Range, MapSet, and Version.Requirement
    [IO] Support Macro.Env and keywords as stacktrace definitions in IO.warn/2
    [IO] Add IO.ANSI.syntax_colors/0 and related configuration to be shared across IEx and dbg
    [Kernel] Add new dbg/0-2 macro
    [Kernel] Allow any guard expression as the size of a bitstring in a pattern match
    [Kernel] Allow composite types with pins as the map key in a pattern match
    [Kernel] Print escaped version of control chars when they show up as unexpected tokens
    [Kernel] Warn on confusable non-ASCII identifiers
    [Kernel] Add .. as a nullary operator that returns 0..-1//1
    [Kernel] Implement Unicode Technical Standard #39 recommendations. In particular, we warn for confusable scripts and restrict identifiers to single-scripts or highly restrictive mixed-scripts
    [Kernel] Automatically perform NFC conversion of identifiers
    [Kernel] Add binary_slice/2 and binary_slice/3
    [Kernel] Lazily expand module attributes to avoid compile-time deps
    [Kernel] Automatically cascade generated: true annotations on macro expansion
    [Keyword] Add Keyword.from_keys/2 and Keyword.replace_lazy/3
    [List] Add List.keysort/3 with support for a sorter function
    [Macro] Add Macro.classify_atom/1 and Macro.inspect_atom/2
    [Macro] Add Macro.expand_literal/2 and Macro.path/2
    [Macro.Env] Add Macro.Env.prune_compile_info/1
    [Map] Add Map.from_keys/2 and Map.replace_lazy/3
    [MapSet] Add MapSet.filter/2, MapSet.reject/2, and MapSet.symmetric_difference/2
    [Node] Add Node.spawn_monitor/2 and Node.spawn_monitor/4
    [Module] Support new @after_verify attribute for executing code whenever a module is verified
    [PartitionSupervisor] Add PartitionSupervisor that starts multiple isolated partitions of the same child for scalability
    [Path] Add Path.safe_relative/1 and Path.safe_relative_to/2
    [Registry] Add Registry.count_select/2
    [Stream] Add Stream.duplicate/2 and Stream.transform/5
    [String] Support empty lookup lists in String.replace/3, String.split/3, and String.splitter/3
    [String] Allow slicing with steps in String.slice/2
    [Task] Add :zip_input_on_exit option to Task.async_stream/3
    [Task] Store :mfa in the Task struct for reflection purposes
    [URI] Add URI.append_query/2
    [Version] Add Version.to_string/1
    [Version] Colorize Version.Requirement source in the Inspect protocol
    ExUnit
    [ExUnit] Add ExUnit.Callbacks.start_link_supervised!/2
    [ExUnit] Add ExUnit.run/1 to rerun test modules
    [ExUnit] Colorize summary in yellow with message when all tests are excluded
    [ExUnit] Display friendly error when test name is too long
    IEx
    [IEx] Evaluate --dot-iex line by line
    [IEx] Add line-by-line evaluation of IEx breakpoints
    [IEx.Autocomplete] Autocomplete bitstrings modifiers (after :: inside &lt;&lt;...&gt;&gt;)
    [IEx.Helpers] Allow an atom to be given to pid/1
    [IEx.Helpers] Support sigils in h/1
    Logger
    [Logger] Add Logger.put_process_level/2
    Mix
    [Mix] Add :config_path and :lockfile options to Mix.install/2
    [mix compile] Add --no-optional-deps to skip optional dependencies to test compilation works without optional dependencies
    [mix compile] Include column information on error diagnostics when possible
    [mix deps] Mix.Dep.Converger now tells which deps formed a cycle
    [mix do] Support --app option to restrict recursive tasks in umbrella projects
    [mix do] Allow using + as a task separator instead of comma
    [mix format] Support filename in mix format - when reading from stdin
    [mix format] Compile if mix format plugins are missing
    [mix new] Do not allow projects to be created with application names that conflict with multi-arg Erlang VM switches
    [mix profile] Return the return value of the profiled function
    [mix release] Make BEAM compression opt-in
    [mix release] Let :runtime_config_path accept false to skip the config/runtime.exs
    [mix test] Improve error message when suite fails due to coverage
    [mix test] Support :test_elixirc_options and default to not generating docs nor debug info chunk for tests
    [mix xref] Support --group flag in mix xref graph
  * 2. Bug fixes
    Elixir
    [Calendar] Handle widths with "0" in them in Calendar.strftime/3
    [CLI] Improve errors on incorrect --rpc-eval usage
    [CLI] Return proper exit code on Windows
    [Code] Do not emit warnings when formatting code
    [Enum] Allow slices to overflow on both starting and ending positions
    [Kernel] Do not allow restricted characters in identifiers according to UTS39
    [Kernel] Define __exception__ field as true when expanding exceptions in typespecs
    [Kernel] Warn if any of True, False, and Nil aliases are used
    [Kernel] Warn on underived @derive attributes
    [Kernel] Remove compile-time dependency from defimpl :for
    [Kernel] Track all arities on imported functions
    [Kernel] Fix equality in guards for dynamic ranges without steps
    [Module] Fix loop while unifying type variables
    [Protocol] Warn if a protocol has no definitions
    [Regex] Show list options when inspecting a Regex manually defined with Regex.compile/2
    [String] Allow slices to overflow on both starting and ending positions
    [System] Raise non-generic exception on missing env in System.fetch_env!/1 to mirror map operations
    ExUnit
    [ExUnit] Do not crash when diffing unknown bindings in guards
    [ExUnit] Properly print diffs when comparing improper lists with strings at the tail position
    [ExUnit] Add short hash to tmp_dir in ExUnit to avoid test name collision
    [ExUnit] Do not store logs in the CLI formatter (this reduces memory usage for suites with capture_log)
    [ExUnit] Run ExUnit.after_suite/1 callback even when no tests run
    [ExUnit] Fix scenario where setup with imported function from within describe failed to compile
    IEx
    [IEx] Disallow short-hand pipe after matches
    [IEx] Fix exports/1 in IEx for long function names
    Mix
    [mix compile.elixir] Fix --warnings-as-errors when used with --all-warnings
    [mix compile.elixir] Ensure semantic recompilation cascades to path dependencies
    [mix compile.elixir] Lock the compiler to avoid concurrent usage
    [mix format] Do not add new lines if the formatted file is empty
    [mix format] Properly compile dependencies on mix format
    [mix release] Only set RELEASE_MODE after env.{sh,bat} are executed
    [mix release] Allow application mode configuration to cascade to dependencies
    [mix xref] Do not emit already consolidated warnings during mix xref trace
    [Mix] Do not start apps with runtime: false on Mix.install/2
  * 3. Soft deprecations (no warnings emitted)
    Elixir
    [File] Passing a callback as third argument to File.cp/3 and File.cp_r/3 is deprecated.
    Instead pass the callback the :on_conflict key of a keyword list
    EEx
    [EEx] Using &lt;%# ... %&gt; for comments is deprecated. Please use &lt;% # ... %&gt; or the new multi-line comments with &lt;%!-- ... --%&gt;
    Logger
    [Logger] Deprecate Logger.enable/1 and Logger.disable/1 in favor of Logger.put_process_level/2
    Mix
    [mix cmd] The --app option in mix cmd CMD is deprecated in favor of the more efficient mix do --app app cmd CMD
  * 4. Hard deprecations
    Elixir
    [Application] Calling Application.get_env/3 and friends in the module body is now discouraged, use Application.compile_env/3 instead
    [Bitwise] use Bitwise is deprecated, use import Bitwise instead
    [Bitwise] ~~~ is deprecated in favor of bnot for clarity
    [Kernel.ParallelCompiler] Returning a list or two-element tuple from :each_cycle is deprecated, return a {:compile | :runtime, modules, warnings} tuple instead
    [Kernel] Deprecate the operator &lt;|&gt; to avoid ambiguity with upcoming extended numerical operators
    [String] Deprecate passing a binary compiled pattern to String.starts_with?/2
    Logger
    [Logger] Deprecate $levelpad on message formatting
    Mix
    [Mix] Mix.Tasks.Xref.calls/1 is deprecated in favor of compilation tracers
  * 5. Backwards incompatible changes
    Mix
    [mix local.rebar] Remove support for rebar2, which has not been updated in 5 years, and is no longer supported on recent Erlang/OTP versions</changelog>
  <changelog author="fabrizio.sestito@suse.com" date="1673352000">- Elixir 1.14.2
  * 1. Enhancements
    Elixir
    [Code] Add Code.eval_quoted_with_env/4 with support for the :prune_binding option
    ExUnit
    [ExUnit.Case] Allow test cases to not be registered on use
    [ExUnit.DocTest] Include :doctest and :doctest_line as meta tags
    [ExUnit.Formatter] Expose ExUnit.Formatter.format_assertion_diff/4
    Mix
    [Mix] Mix.install/2 accepts atoms as paths
  * 2. Bug fixes
    Elixir
    [Code.Formatter] Fix size*unit shortcut in bitstring
    [Kernel] Generate unique variables for macro expansion of defguard
    [Protocol] Expand :for in protocols with the appropriate env
    ExUnit
    [ExUnit] Do not run duplicate cases on ExUnit.run/1
    Mix
    [mix test] Ensure proper error message when there is no test directory
- Elixir 1.14.1
  * 1. Enhancements
    Elixir
    [Kernel] Perform partial expansion of literals in module attributes
    [Kernel] Do not add compile-time dependencies for literals as defaults in Application.compile_env/3 inside module attributes
    [Macro] Add Macro.expand_literals/2 and Macro.expand_literals/3
    [System] Add :close_stdin to System.shell/2
    Mix
    [mix test] Accept --all-warnings option
  * 2. Bug fixes
    Elixir
    [Kernel] Fix misleading warning when :uniq is given in for comprehensions and the result is unused
    [Kernel] Improve error message for when there is a conflicting struct and ignoring module conflict
    [Kernel] Do not delete @enforce_keys attribute after defstruct declaration
    [Kernel] Do not crash the checker on modules with missing :debug_info chunk
    [Macro] Fix error in Macro.to_string/2 when converting an AST with :erlang.binary_to_atom/2
    [String] Fix String.split/3 and String.next_grapheme/1 returning invalid results on invalid UTF-8 encoding
    [System] Do not close stdin by default in System.shell/2
    [URI] Do not return uri.port as :undefined in certain cases in URI.new/1
    ExUnit
    [ExUnit.DocTest] Do not crash when both :moduledoc and functions are specified in :only
    IEx
    [CLI] Fix invalid argument handling when --no-pry is given
    Mix
    [mix format] Do not cache inputs from .formatter.exs so they are properly re-evaluted on every call</changelog>
  <changelog author="pirateclip@protonmail.com" date="1675771200">- Drop git as a requires and switch buildrequires from git to git-core
  * Git is not needed to use Elixir, only to run some tests
  (which git-core can accomplish on its own without git)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1699704000">- Update to Elixir 1.15.7:
  * Fix build for Erlang 26
  * Changelog available at https://hexdocs.pm/elixir/1.15.7/changelog.html
- Add 0001-Use-PID-valid-for-32-bit-systems-closes-12741.patch:
  * Fix build for 32bit
- Add 0001-Use-PID-valid-for-32-bit-systems-followup-to-12741-1.patch:
  * Fix build for 32bit</changelog>
  <changelog author="sflees@suse.de" date="1699876800">- Switch from %patch0 to %autosetup</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1700568000">- Use pregenerated documentation</changelog>
</package>
<package pkgid="2d6cc87a5b674f9320a7c2b5cf4a5a3b73eb6a08e2c3b9870be5d82a6b2c6b0d" name="erlang-rabbitmq-client313" arch="aarch64">
  <version epoch="0" ver="3.13.1" rel="150600.13.5.3"/>
  <changelog author="qydwhotmail@gmail.com" date="1637323200">- Update to 3.9.9:
  * Core Server Bug Fixes
  - Fixed an issue where node monitor could produce a false network
    partition when one of the cluster members was restarted.
  - Message store resiliency improvements.
  - Reduced log noise in certain scenarios where a new queue leader
    is elected.
  - Queue leader rebalancing now logs less.
  * Prometheus Plugin Bug Fixes
  - TLS-enabled Prometheus endpoint listener port was not correctly
    stored internally.
  * Management Plugin Bug Fixes
  - Persistent message count is now displayed correctly on
    individual queue pages.
  - Restore compatibility with IE 11.
  * Consistent Hashing Exchange Plugin Bug Fixes
  - Corrected deletion of duplicate bindings between an exchange
    and a queue.
  * Enhancements
  - Core Server: cluster_formation.target_cluster_size_hint is a
    new configuration setting that can be used to specify expected
    initial cluster size.
  - Prometheus Plugin: Metric rendering efficiency improvements
    (mostly latency).
- Don't install the (now gone) OCF script.
- Refreshed patch:
  * harden_rabbitmq-server.service.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1638446400">- Update to 3.9.11
  * Core Server Bug Fixes
  - When a TLS-enabled listener failed to stop, it logged all of
    its settings which could contain sensitive values.
  * Core Server Enhancements
  - Quorum queues now store commands for enqueued messages in a
    more compact format on disk (some derivative data has been dropped).
  - queue.declare-ok response to AMQP 0-9-1 clients operating on
    a stream could return a ready-for-delivery message count
    value that was out of sync with the stream leader replica.
  - Classic queues now deliver more efficiently on channels that
    had global QoS changed during consumer operation.
  * Prometheus Plugin Enhancements
  - New optional metrics provided by the GET /metrics/detailed
    endpoint. These metrics are cluster-wide, and therefore must
    not be aggregated.
  * Management Agent Plugin Enhancements
  - Disabling the plugin will stop metric collection performed
    periodically by queues, streams, connections, et cetera.
- Changes in 3.9.10:
  * Core Server Bug Fixes
  - Make stream coordinator more defensive to rapid declaration
    and deletion cycles.
  * Core Server Enhancements
  - Several inter-node communication listener settings are now
    exposed to rabbitmq.conf:
    + distribution.listener.port_range.min = 25675
    + distribution.listener.port_range.max = 25675
    + distribution.listener.interface = 192.168.0.1
  * OAuth 2 Plugin Bug Fixes
  - Signing keys specified in rabbitmq.conf were not translated
    correctly, resulting in exceptions during permission checks.
- Drop upstreamed patch
  * harden_rabbitmq-server.service.patch: https://github.com/rabbitmq/rabbitmq-server/pull/3770</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1641470400">- Update to 3.9.12
  * See https://github.com/rabbitmq/rabbitmq-server/blob/v3.9.x/release-notes/3.9.12.md
    for the full changelog.
  * Core Server Bug Fixes and Enhancements
  - (Fix) Authentication and authorization backend exceptions
    could potentially leak user-provided credentials to node log.
  - Unnamed parameters and policies in definition files will now
    be rejected as invalid.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1642593600">- Update to 3.9.13
  * Core Server Bug Fixes and Enhancements
  - Disk space monitor now correctly parses output on (at least
    some) systems where non-ASCII characters are used in paths.
  - Stream leader election is now deterministic when cluster is
    undergoing a rolling upgrade.
  - Queue and binding definition import can be delayed until a
    moment when at least N nodes (e.g. three) have joined the
    cluster.
- Allow building with Elixir 1.13.x
  * Support-Elixir-1.13.patch
  * Elixir-1.13-OptionParser-no-longer-supports-atom-val.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1645272000">- Add zsh BuildRequires to fix "directories not owned by a package"
  in zsh-completion.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1648209600">- Update to 3.9.14
  * See https://github.com/rabbitmq/rabbitmq-server/blob/v3.9.x/release-notes/3.9.14.md
    for the full changelog.
  * Build time compatibility with Elixir 1.13 (gh#rabbitmq/rabbitmq-server#4019)
  - Drop Elixir-1.13-OptionParser-no-longer-supports-atom-val.patch
  - Drop Support-Elixir-1.13.patch
  * Adapt to a breaking Erlang 24.3 LDAP client change.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1652011200">- Update to 3.10.0
  * See https://github.com/rabbitmq/rabbitmq-server/blob/v3.10.x/release-notes/3.10.0.md
    for the full changelog.
  * Potentially breaking changes
  - Messages delivered by a quorum queue and negatively acknowledged
    with a requeue will be added to the back of the queue until the
    queue has redelivery limit set. With a redelivery limit, requeueing
    will use the original position of the message if possible.
  - idle_since field now uses RFC 3339 format.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652270400">- add upstream signing key and verify source signature</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1653134400">- Update to 3.10.2
  * Default log level used a four-character severity abbreviation
    instead of more common longer format, for example, warn instead
    of warning.
  * Fix CLI tools failed to run on Erlang 25</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1655553600">- Update to 3.10.5
  * Quorum queue could run into an exception when dead lettering a message
    under certain conditions.
- Changes from 3.10.4
  * Avoid seeding default user in old clusters that still use the deprecated
    management.load_definitions option.
  * Streams could run into an exception or fetch stale stream position
    data in some scenarios.
  * rabbitmqctl set_log_level did not have any effect on logging via
    amq.rabbitmq.log</changelog>
  <changelog author="dimstar@opensuse.org" date="1666785600">- Update to version 3.10.10:
  + Core Server
  * Partially reverts an unsafe inter-node communication
    optimization that could affect classic mirrored queue
    operation ordering.
  * Classic mirrored queue leader replica issued to much credit
    to follower replicas, resulting in an uneven load and
    memory footprint between them.
  * Intra-cluster communication link metric collector could run
    into an exception when peer connection has just been
    re-established, e.g. after a peer node restart.
  + MQTT Plugin
  * When a node was put into maintenance mode, it closed all MQTT
    client connections cluster-wide instead of just local client
    connections.
- For updates between 3.10.5 and 3.10.9, please see
  https://www.rabbitmq.com/changelog.html</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1667995200">- Update to 3.11.3
  + Core Server
  * Stream unsubscription leaked metric counters.
  * Stream could become unavailable in certain node or network
    failure scenarios.
  * It is now possible to pre-configure virtual host limits for
    groups of virtual hosts.
  * Quorum queue replicas no longer try to contact their unreachable
    peers for metrics.
  + CLI Tools
  * rabbitmq-diagnostics status now handles server responses where
    free disk space is not yet computed.
  * All enabled (explicitly or as a dependency) plugins are scanned.
  * rabbitmq-diagnostics memory_breakdown now returns results much
    faster in environments with a large number of quorum queues.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1685966400">- Update to 3.12.0
  * Optimizations for both quorum and classic queues: improved throughput,
    lower throughput variability, lower latency, lower memory footprint
  * More mature and efficient implementation of (non-mirrored) classic
    queues v2 (CQv2)
  * Classic queue lazy and non-lazy modes no longer apply: classic
    queues v2 always behave very similarly
  * to the lazy mode in earlier release series: moving data to disk
    aggressively and only keeping a subset of data in memory
  * Significantly reduced MQTT and Web MQTT memory footprint per connection
  * OAuth 2, OIDC, IDP support
  * Even more configurability of the OAuth 2 plugin
- More bugfixes and enhancements:
  https://www.rabbitmq.com/changelog.html</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1689681600">- Improve erlang-rabbitmq-client Provides:
  The package provides two erlang applications: amqp_client and rabbit_common
  which are expected to be Required as erlang-%{appname}</changelog>
  <changelog author="dmueller@suse.com" date="1698580800">-  update to 3.12.7:
  * Stream replication connections configured to use exclusively
    TLSv1.3 failed.
  * On startup, stream replicas will handle one more potential
    case of segment file corruption after an unclean shutdown.
  * `default_policies.*.queue_pattern` definition in
    `rabbitmq.conf` was incorrectly parsed.
  * Avoid log noise when inter-node connections frequently fail
    and recover.
  * Optimized stream index scans. Longer scans could result in
    some replicas stopping with a timeout.
  * Classic queue storage version is now a supported key for
    operator policies.
  * Queue length limit overflow behavior now can be configured
    via operator policies.
  * Several `list_stream_*` commands (available via both
    `rabbitmq-diagnostics` and `rabbitmq-streams`) commands now
    can display replica node in addition to other fields.
  * `rabbitmqctl add_user` now can accept a pre-generated salted
    password instead of a plain text password, both as a
    positional argument and via standard input:
  * Message consumption with the "Nack message, requeue: true"
    option did not actually requeue deliveries.
  * HTTP API request body size is now limited to 10 MiB by
    default.
  * Two endpoints, one that accepts messages for publishing
    (note: publishing over the HTTP API is greatly discouraged)
  * and another for definition import,
  * will now reject larger transfers with a `400 Bad Request`
    response.
  * `DELETE /api/queues/{vhost}/{name}` now can delete exclusive
    queues.
  * Key supported by operator policies are now grouped by queue
    type in the UI.
  * Improved data safety for confirms in environments where the
    plugin uses classic queues.
  * Avoid an exception when a not fully established MQTT-over-
    WebSockets connection terminated.
  * Recovery of bindings of durable queues bound to a transient
    JMS topic exchange failed.
  * Recovery of bindings of durable queues bound to a transient
    `x-modulo-hash` exchange failed.
  * Recovery of bindings of durable queues bound to a transient
    recent history exchange failed.
  * `osiris` has been upgraded to `1.6.9`
  * Queue recovery on node restart in certain conditions could
    run into an exception
  * `file_handle_cache` operations are now safer when handling
    non-existent keys.
  * Fixed a potential resource leak in at-least-once dead
    lettering from quorum queues.
  * AMQP 1.0 clients that try to publish in a way that results in
    the message not being routed anywhere are now notified with
    a more sensible settlement status.
  * Prometheus scraping API endpoints now support optional
    authentication.
  * The plugin now filters out values that are `undefined` or
    `NaN`, simply excluding them from the API endpoint response.
    Previously, if a metric was not computed for any reason (e.g.
    free disk space monitor was disabled on the node),
    its value could end up being rendered as `undefined` or `NaN`,
    two values that Prometheus scrapers cannot handle (for
  * The plugin will now enforce maximum STOMP frame size. Frames
    larger than that size will be rejected. The default maximum
    size is 4 MiB. It can be increased or decreased:
  * ``` ini
  * # increase maximum supported STOMP frame size to 10 MiB
  * stomp.max_frame_size = 10485760
  * ```
  * To reduce it from the default 4 MiB to 2 MiB:
  * ``` ini
  * # 2 MiB
  * stomp.max_frame_size = 2097152
  * ```
  * Shovel will gracefully stop when its destination (target)
    does not exist.
  * Such shovels will then be periodically restarted to retry.
  * It is now possible to opt in to deactivate file handle cache
    use in the plugin:
  * ``` ini
  * web_mqtt.use_file_handle_cache = false
  * ```
  * It is now possible to opt in to deactivate file handle cache
    use in the plugin:
  * ``` ini
  * web_stomp.use_file_handle_cache = false
  * ```
  * `ra` was upgraded to `2.6.3`
  * Declaration of a classic queue could run into an exception.
  * Classic queues v1 (CQv1) that had a backlog of messages
    stored by 3.9 and earlier versions could run into an exception
    during queue index recovery after an upgrade to 3.10.x or any
    later series.
  * Nodes that had a large number of quorum queues could observe
    accumulation of Erlang processes under significant load.
  * Feature flag discovery on a newly added node could discover
    an incomplete inventory of feature flags.
  * Feature flag discovery operations will now be retried
    multiple times in case of network failures.
  * Nodes in clusters that had quorum queues and non-mirrored
    classic queues on stopped (or failed) nodes could run into an
    exception.
  * The same exception could affect `rabbitmqctl list_queues`.
  * Proxy Protocol v2 LOCAL packets were not supported.
  * When a quorum queue does not find its local replica data
    files on boot, it will now log a warning.
  * An attempt to clear limits of a non-existent virtual host
    failed with a 500 status code.
  * The "Queues" tab in the UI was renamed to "Queue and Streams"
    to better reflect its contents.
  * New HTTP API endpoints for quorum queue replica management,
    equivalent to the `rabbitmq-queues` commands that manage replicas.
  * ```
  * POST /api/queues/quorum/{vhost}/{name}/replicas/add
  * DELETE /api/queues/quorum/{vhost}/{name}/replicas/remove
  * POST /api/queues/quorum/replicas/on/{node}/grow
  * DELETE /api/queues/quorum/replicas/on/{node}/shrink
  * ```
  * Stream client connections that authenticated using x.509
    certificates failed.
  * Only set OAuth 2 client's CA certificate file setting when it
    is defined.
  * The plugin will now accept JWT tokens without a `scope`. Such
    tokens would only be useful when the plugin is used exclusively
    for authentication and not authorization.
  * `oauth2` is now an accepted alias for the OAuth 2
    authentication and authorization backend:
  * ```
  * auth_backends.1 = oauth2
  * ```
  * Previously the only option for OAuth 2 was using a full
    module name, `rabbit_auth_backend_oauth2`.
  * STOMP plugin log entries had an extra line feed character.
  * `ra` was upgraded to `2.6.2`</changelog>
  <changelog author="dmueller@suse.com" date="1702814400">- update to 3.12.10:
  * Avoids two Shovels being started after an upgrade from 3.12.6
    or older versions.
  * When a topic permission was deleted, an internal event of type
    permission.deleted was emitted in some cases, instead of
    topic.permission.deleted.
  * Shovels on 3.12.8 nodes failed during a rolling cluster upgrade
    due to internal identifier format changes.
  * Avoids an unnecessary warning in the logs.
  * avoids a potential exception in the autoheal partition handler.
  * raft.segment_max_entries is now validated to prevent the value
    from overflowing its 16-bit segment file field. Maximum
    supported value is now 65535.</changelog>
  <changelog author="dmueller@suse.com" date="1704542400">- update to 3.12.11:
  * Quorum queue declared when one of cluster nodes was down
    could trigger connection exceptions.
  * Avoids a rare exception that could stop TCP socket writes on
    a client connection.
  * `queue_deleted` and `queue_created` internal events now
    include queue type as a module name, and not an inconsistent
    (with the other queue and stream types) value `classic`.
  * Definition files that are virtual host-specific cannot be
    imported on boot. Such files will now be detected early and
    the import process will terminate after logging a more
    informative message.
  * Several AMQP 1.0 application properties are now more
    correctly converted to AMQP 0-9-1 headers by
    cross-protocol Shovels.
  * The priority property now populates an AMQP 1.0 header with
    the same name, per AMQP 1.0 spec.
  * Metric label values now escape certain non-ASCII characters.
  * Avoids an exception when an MQTT client that used a QoS 0
    subscription reconnects and its original connection node
    is down.
  * Avoids an exception when an MQTT client connection was force-
    closed via the HTTP API.
  * Certain CLI commands could not be run in a shell script loop,
    unless the script explicitly redirected standard input.
  * `rabbitmq-diagnostics cluster_status` now responds much
    quicker when a cluster node has gone down, were shut down,
    or otherwise has become unreachable by the rest of the cluster.
  * Reverted a change to `DELETE /api/queues/{vhost}/{name}` that
    allowed removal of exclusive queues and introduced
    unexpected side effects.
  * `DELETE /api/policies/{vhost}/{policy}` returned a 500
    response instead of a 404 one when target virtual host did
    not exist.
  * Avoid log noise when an HTTP API request is issued against a
    booting or very freshly booted node.
  * HTTP API endpoints that involves contacting multiple nodes
    now respond much quicker when a cluster node
    has gone down, were shut down, or otherwise has become
    unreachable by the rest of the cluster
  * Definition exported for just one virtual host cannot be
    imported at node boot time.
  * Now such files are detected early with a clear log message
    and immediate node boot process termination.
  * To obtain source code of the entire distribution, please
    download the archive named `rabbitmq-server-3.12.11.tar.xz`
    instead of the source tarball produced by GitHub.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707220800">- Provide user/group for RPM 4.19 (boo#1219532).</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Update to 3.13.1
  * Highlights
    Khepri now can be used as an alternative schema data store in RabbitMQ, replacing Mnesia
    MQTTv5 support
    Support for consumer-side stream filtering
    A new common message container format used internally, based on the AMQP 1.0 message format
    Improved classic non-mirrored queue performance with message sizes larger than
    4 KiB (or a different customized CQ index embedding threshold)
    Classic queues storage implementation version 2 (CQv2) is now highly recommended for all new deployments.
    CQv2 meaningfully improves performance of non-mirrored classic queues for most workloads
  * Fixes bsc#1222591</changelog>
  <changelog author="simonf.lees@suse.com" date="1717156800">- Create a versioned package for SLES
-  The following bugfixes and CVE's were fixed upstream
  (bsc#1186203,CVE-2021-22116), (bsc#1187818, CVE-2021-32718),
  (bsc#1187819, CVE-2021-32719) (bsc#1199431),
  (bsc#1205267), (bsc#1216582, CVE-2022-31008)</changelog>
</package>
<package pkgid="7565c95f43ecab9d971a0ba2b1581285e02ad2eefbce6cde28a2a22f08316d39" name="erlang-rabbitmq-client313" arch="ppc64le">
  <version epoch="0" ver="3.13.1" rel="150600.13.5.3"/>
  <changelog author="qydwhotmail@gmail.com" date="1637323200">- Update to 3.9.9:
  * Core Server Bug Fixes
  - Fixed an issue where node monitor could produce a false network
    partition when one of the cluster members was restarted.
  - Message store resiliency improvements.
  - Reduced log noise in certain scenarios where a new queue leader
    is elected.
  - Queue leader rebalancing now logs less.
  * Prometheus Plugin Bug Fixes
  - TLS-enabled Prometheus endpoint listener port was not correctly
    stored internally.
  * Management Plugin Bug Fixes
  - Persistent message count is now displayed correctly on
    individual queue pages.
  - Restore compatibility with IE 11.
  * Consistent Hashing Exchange Plugin Bug Fixes
  - Corrected deletion of duplicate bindings between an exchange
    and a queue.
  * Enhancements
  - Core Server: cluster_formation.target_cluster_size_hint is a
    new configuration setting that can be used to specify expected
    initial cluster size.
  - Prometheus Plugin: Metric rendering efficiency improvements
    (mostly latency).
- Don't install the (now gone) OCF script.
- Refreshed patch:
  * harden_rabbitmq-server.service.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1638446400">- Update to 3.9.11
  * Core Server Bug Fixes
  - When a TLS-enabled listener failed to stop, it logged all of
    its settings which could contain sensitive values.
  * Core Server Enhancements
  - Quorum queues now store commands for enqueued messages in a
    more compact format on disk (some derivative data has been dropped).
  - queue.declare-ok response to AMQP 0-9-1 clients operating on
    a stream could return a ready-for-delivery message count
    value that was out of sync with the stream leader replica.
  - Classic queues now deliver more efficiently on channels that
    had global QoS changed during consumer operation.
  * Prometheus Plugin Enhancements
  - New optional metrics provided by the GET /metrics/detailed
    endpoint. These metrics are cluster-wide, and therefore must
    not be aggregated.
  * Management Agent Plugin Enhancements
  - Disabling the plugin will stop metric collection performed
    periodically by queues, streams, connections, et cetera.
- Changes in 3.9.10:
  * Core Server Bug Fixes
  - Make stream coordinator more defensive to rapid declaration
    and deletion cycles.
  * Core Server Enhancements
  - Several inter-node communication listener settings are now
    exposed to rabbitmq.conf:
    + distribution.listener.port_range.min = 25675
    + distribution.listener.port_range.max = 25675
    + distribution.listener.interface = 192.168.0.1
  * OAuth 2 Plugin Bug Fixes
  - Signing keys specified in rabbitmq.conf were not translated
    correctly, resulting in exceptions during permission checks.
- Drop upstreamed patch
  * harden_rabbitmq-server.service.patch: https://github.com/rabbitmq/rabbitmq-server/pull/3770</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1641470400">- Update to 3.9.12
  * See https://github.com/rabbitmq/rabbitmq-server/blob/v3.9.x/release-notes/3.9.12.md
    for the full changelog.
  * Core Server Bug Fixes and Enhancements
  - (Fix) Authentication and authorization backend exceptions
    could potentially leak user-provided credentials to node log.
  - Unnamed parameters and policies in definition files will now
    be rejected as invalid.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1642593600">- Update to 3.9.13
  * Core Server Bug Fixes and Enhancements
  - Disk space monitor now correctly parses output on (at least
    some) systems where non-ASCII characters are used in paths.
  - Stream leader election is now deterministic when cluster is
    undergoing a rolling upgrade.
  - Queue and binding definition import can be delayed until a
    moment when at least N nodes (e.g. three) have joined the
    cluster.
- Allow building with Elixir 1.13.x
  * Support-Elixir-1.13.patch
  * Elixir-1.13-OptionParser-no-longer-supports-atom-val.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1645272000">- Add zsh BuildRequires to fix "directories not owned by a package"
  in zsh-completion.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1648209600">- Update to 3.9.14
  * See https://github.com/rabbitmq/rabbitmq-server/blob/v3.9.x/release-notes/3.9.14.md
    for the full changelog.
  * Build time compatibility with Elixir 1.13 (gh#rabbitmq/rabbitmq-server#4019)
  - Drop Elixir-1.13-OptionParser-no-longer-supports-atom-val.patch
  - Drop Support-Elixir-1.13.patch
  * Adapt to a breaking Erlang 24.3 LDAP client change.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1652011200">- Update to 3.10.0
  * See https://github.com/rabbitmq/rabbitmq-server/blob/v3.10.x/release-notes/3.10.0.md
    for the full changelog.
  * Potentially breaking changes
  - Messages delivered by a quorum queue and negatively acknowledged
    with a requeue will be added to the back of the queue until the
    queue has redelivery limit set. With a redelivery limit, requeueing
    will use the original position of the message if possible.
  - idle_since field now uses RFC 3339 format.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652270400">- add upstream signing key and verify source signature</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1653134400">- Update to 3.10.2
  * Default log level used a four-character severity abbreviation
    instead of more common longer format, for example, warn instead
    of warning.
  * Fix CLI tools failed to run on Erlang 25</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1655553600">- Update to 3.10.5
  * Quorum queue could run into an exception when dead lettering a message
    under certain conditions.
- Changes from 3.10.4
  * Avoid seeding default user in old clusters that still use the deprecated
    management.load_definitions option.
  * Streams could run into an exception or fetch stale stream position
    data in some scenarios.
  * rabbitmqctl set_log_level did not have any effect on logging via
    amq.rabbitmq.log</changelog>
  <changelog author="dimstar@opensuse.org" date="1666785600">- Update to version 3.10.10:
  + Core Server
  * Partially reverts an unsafe inter-node communication
    optimization that could affect classic mirrored queue
    operation ordering.
  * Classic mirrored queue leader replica issued to much credit
    to follower replicas, resulting in an uneven load and
    memory footprint between them.
  * Intra-cluster communication link metric collector could run
    into an exception when peer connection has just been
    re-established, e.g. after a peer node restart.
  + MQTT Plugin
  * When a node was put into maintenance mode, it closed all MQTT
    client connections cluster-wide instead of just local client
    connections.
- For updates between 3.10.5 and 3.10.9, please see
  https://www.rabbitmq.com/changelog.html</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1667995200">- Update to 3.11.3
  + Core Server
  * Stream unsubscription leaked metric counters.
  * Stream could become unavailable in certain node or network
    failure scenarios.
  * It is now possible to pre-configure virtual host limits for
    groups of virtual hosts.
  * Quorum queue replicas no longer try to contact their unreachable
    peers for metrics.
  + CLI Tools
  * rabbitmq-diagnostics status now handles server responses where
    free disk space is not yet computed.
  * All enabled (explicitly or as a dependency) plugins are scanned.
  * rabbitmq-diagnostics memory_breakdown now returns results much
    faster in environments with a large number of quorum queues.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1685966400">- Update to 3.12.0
  * Optimizations for both quorum and classic queues: improved throughput,
    lower throughput variability, lower latency, lower memory footprint
  * More mature and efficient implementation of (non-mirrored) classic
    queues v2 (CQv2)
  * Classic queue lazy and non-lazy modes no longer apply: classic
    queues v2 always behave very similarly
  * to the lazy mode in earlier release series: moving data to disk
    aggressively and only keeping a subset of data in memory
  * Significantly reduced MQTT and Web MQTT memory footprint per connection
  * OAuth 2, OIDC, IDP support
  * Even more configurability of the OAuth 2 plugin
- More bugfixes and enhancements:
  https://www.rabbitmq.com/changelog.html</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1689681600">- Improve erlang-rabbitmq-client Provides:
  The package provides two erlang applications: amqp_client and rabbit_common
  which are expected to be Required as erlang-%{appname}</changelog>
  <changelog author="dmueller@suse.com" date="1698580800">-  update to 3.12.7:
  * Stream replication connections configured to use exclusively
    TLSv1.3 failed.
  * On startup, stream replicas will handle one more potential
    case of segment file corruption after an unclean shutdown.
  * `default_policies.*.queue_pattern` definition in
    `rabbitmq.conf` was incorrectly parsed.
  * Avoid log noise when inter-node connections frequently fail
    and recover.
  * Optimized stream index scans. Longer scans could result in
    some replicas stopping with a timeout.
  * Classic queue storage version is now a supported key for
    operator policies.
  * Queue length limit overflow behavior now can be configured
    via operator policies.
  * Several `list_stream_*` commands (available via both
    `rabbitmq-diagnostics` and `rabbitmq-streams`) commands now
    can display replica node in addition to other fields.
  * `rabbitmqctl add_user` now can accept a pre-generated salted
    password instead of a plain text password, both as a
    positional argument and via standard input:
  * Message consumption with the "Nack message, requeue: true"
    option did not actually requeue deliveries.
  * HTTP API request body size is now limited to 10 MiB by
    default.
  * Two endpoints, one that accepts messages for publishing
    (note: publishing over the HTTP API is greatly discouraged)
  * and another for definition import,
  * will now reject larger transfers with a `400 Bad Request`
    response.
  * `DELETE /api/queues/{vhost}/{name}` now can delete exclusive
    queues.
  * Key supported by operator policies are now grouped by queue
    type in the UI.
  * Improved data safety for confirms in environments where the
    plugin uses classic queues.
  * Avoid an exception when a not fully established MQTT-over-
    WebSockets connection terminated.
  * Recovery of bindings of durable queues bound to a transient
    JMS topic exchange failed.
  * Recovery of bindings of durable queues bound to a transient
    `x-modulo-hash` exchange failed.
  * Recovery of bindings of durable queues bound to a transient
    recent history exchange failed.
  * `osiris` has been upgraded to `1.6.9`
  * Queue recovery on node restart in certain conditions could
    run into an exception
  * `file_handle_cache` operations are now safer when handling
    non-existent keys.
  * Fixed a potential resource leak in at-least-once dead
    lettering from quorum queues.
  * AMQP 1.0 clients that try to publish in a way that results in
    the message not being routed anywhere are now notified with
    a more sensible settlement status.
  * Prometheus scraping API endpoints now support optional
    authentication.
  * The plugin now filters out values that are `undefined` or
    `NaN`, simply excluding them from the API endpoint response.
    Previously, if a metric was not computed for any reason (e.g.
    free disk space monitor was disabled on the node),
    its value could end up being rendered as `undefined` or `NaN`,
    two values that Prometheus scrapers cannot handle (for
  * The plugin will now enforce maximum STOMP frame size. Frames
    larger than that size will be rejected. The default maximum
    size is 4 MiB. It can be increased or decreased:
  * ``` ini
  * # increase maximum supported STOMP frame size to 10 MiB
  * stomp.max_frame_size = 10485760
  * ```
  * To reduce it from the default 4 MiB to 2 MiB:
  * ``` ini
  * # 2 MiB
  * stomp.max_frame_size = 2097152
  * ```
  * Shovel will gracefully stop when its destination (target)
    does not exist.
  * Such shovels will then be periodically restarted to retry.
  * It is now possible to opt in to deactivate file handle cache
    use in the plugin:
  * ``` ini
  * web_mqtt.use_file_handle_cache = false
  * ```
  * It is now possible to opt in to deactivate file handle cache
    use in the plugin:
  * ``` ini
  * web_stomp.use_file_handle_cache = false
  * ```
  * `ra` was upgraded to `2.6.3`
  * Declaration of a classic queue could run into an exception.
  * Classic queues v1 (CQv1) that had a backlog of messages
    stored by 3.9 and earlier versions could run into an exception
    during queue index recovery after an upgrade to 3.10.x or any
    later series.
  * Nodes that had a large number of quorum queues could observe
    accumulation of Erlang processes under significant load.
  * Feature flag discovery on a newly added node could discover
    an incomplete inventory of feature flags.
  * Feature flag discovery operations will now be retried
    multiple times in case of network failures.
  * Nodes in clusters that had quorum queues and non-mirrored
    classic queues on stopped (or failed) nodes could run into an
    exception.
  * The same exception could affect `rabbitmqctl list_queues`.
  * Proxy Protocol v2 LOCAL packets were not supported.
  * When a quorum queue does not find its local replica data
    files on boot, it will now log a warning.
  * An attempt to clear limits of a non-existent virtual host
    failed with a 500 status code.
  * The "Queues" tab in the UI was renamed to "Queue and Streams"
    to better reflect its contents.
  * New HTTP API endpoints for quorum queue replica management,
    equivalent to the `rabbitmq-queues` commands that manage replicas.
  * ```
  * POST /api/queues/quorum/{vhost}/{name}/replicas/add
  * DELETE /api/queues/quorum/{vhost}/{name}/replicas/remove
  * POST /api/queues/quorum/replicas/on/{node}/grow
  * DELETE /api/queues/quorum/replicas/on/{node}/shrink
  * ```
  * Stream client connections that authenticated using x.509
    certificates failed.
  * Only set OAuth 2 client's CA certificate file setting when it
    is defined.
  * The plugin will now accept JWT tokens without a `scope`. Such
    tokens would only be useful when the plugin is used exclusively
    for authentication and not authorization.
  * `oauth2` is now an accepted alias for the OAuth 2
    authentication and authorization backend:
  * ```
  * auth_backends.1 = oauth2
  * ```
  * Previously the only option for OAuth 2 was using a full
    module name, `rabbit_auth_backend_oauth2`.
  * STOMP plugin log entries had an extra line feed character.
  * `ra` was upgraded to `2.6.2`</changelog>
  <changelog author="dmueller@suse.com" date="1702814400">- update to 3.12.10:
  * Avoids two Shovels being started after an upgrade from 3.12.6
    or older versions.
  * When a topic permission was deleted, an internal event of type
    permission.deleted was emitted in some cases, instead of
    topic.permission.deleted.
  * Shovels on 3.12.8 nodes failed during a rolling cluster upgrade
    due to internal identifier format changes.
  * Avoids an unnecessary warning in the logs.
  * avoids a potential exception in the autoheal partition handler.
  * raft.segment_max_entries is now validated to prevent the value
    from overflowing its 16-bit segment file field. Maximum
    supported value is now 65535.</changelog>
  <changelog author="dmueller@suse.com" date="1704542400">- update to 3.12.11:
  * Quorum queue declared when one of cluster nodes was down
    could trigger connection exceptions.
  * Avoids a rare exception that could stop TCP socket writes on
    a client connection.
  * `queue_deleted` and `queue_created` internal events now
    include queue type as a module name, and not an inconsistent
    (with the other queue and stream types) value `classic`.
  * Definition files that are virtual host-specific cannot be
    imported on boot. Such files will now be detected early and
    the import process will terminate after logging a more
    informative message.
  * Several AMQP 1.0 application properties are now more
    correctly converted to AMQP 0-9-1 headers by
    cross-protocol Shovels.
  * The priority property now populates an AMQP 1.0 header with
    the same name, per AMQP 1.0 spec.
  * Metric label values now escape certain non-ASCII characters.
  * Avoids an exception when an MQTT client that used a QoS 0
    subscription reconnects and its original connection node
    is down.
  * Avoids an exception when an MQTT client connection was force-
    closed via the HTTP API.
  * Certain CLI commands could not be run in a shell script loop,
    unless the script explicitly redirected standard input.
  * `rabbitmq-diagnostics cluster_status` now responds much
    quicker when a cluster node has gone down, were shut down,
    or otherwise has become unreachable by the rest of the cluster.
  * Reverted a change to `DELETE /api/queues/{vhost}/{name}` that
    allowed removal of exclusive queues and introduced
    unexpected side effects.
  * `DELETE /api/policies/{vhost}/{policy}` returned a 500
    response instead of a 404 one when target virtual host did
    not exist.
  * Avoid log noise when an HTTP API request is issued against a
    booting or very freshly booted node.
  * HTTP API endpoints that involves contacting multiple nodes
    now respond much quicker when a cluster node
    has gone down, were shut down, or otherwise has become
    unreachable by the rest of the cluster
  * Definition exported for just one virtual host cannot be
    imported at node boot time.
  * Now such files are detected early with a clear log message
    and immediate node boot process termination.
  * To obtain source code of the entire distribution, please
    download the archive named `rabbitmq-server-3.12.11.tar.xz`
    instead of the source tarball produced by GitHub.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707220800">- Provide user/group for RPM 4.19 (boo#1219532).</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Update to 3.13.1
  * Highlights
    Khepri now can be used as an alternative schema data store in RabbitMQ, replacing Mnesia
    MQTTv5 support
    Support for consumer-side stream filtering
    A new common message container format used internally, based on the AMQP 1.0 message format
    Improved classic non-mirrored queue performance with message sizes larger than
    4 KiB (or a different customized CQ index embedding threshold)
    Classic queues storage implementation version 2 (CQv2) is now highly recommended for all new deployments.
    CQv2 meaningfully improves performance of non-mirrored classic queues for most workloads
  * Fixes bsc#1222591</changelog>
  <changelog author="simonf.lees@suse.com" date="1717156800">- Create a versioned package for SLES
-  The following bugfixes and CVE's were fixed upstream
  (bsc#1186203,CVE-2021-22116), (bsc#1187818, CVE-2021-32718),
  (bsc#1187819, CVE-2021-32719) (bsc#1199431),
  (bsc#1205267), (bsc#1216582, CVE-2022-31008)</changelog>
</package>
<package pkgid="ce2ea92512c098dec568bf086a7a55519de13a509fb6702b8b5222575c496ecd" name="erlang-rabbitmq-client313" arch="s390x">
  <version epoch="0" ver="3.13.1" rel="150600.13.5.3"/>
  <changelog author="qydwhotmail@gmail.com" date="1637323200">- Update to 3.9.9:
  * Core Server Bug Fixes
  - Fixed an issue where node monitor could produce a false network
    partition when one of the cluster members was restarted.
  - Message store resiliency improvements.
  - Reduced log noise in certain scenarios where a new queue leader
    is elected.
  - Queue leader rebalancing now logs less.
  * Prometheus Plugin Bug Fixes
  - TLS-enabled Prometheus endpoint listener port was not correctly
    stored internally.
  * Management Plugin Bug Fixes
  - Persistent message count is now displayed correctly on
    individual queue pages.
  - Restore compatibility with IE 11.
  * Consistent Hashing Exchange Plugin Bug Fixes
  - Corrected deletion of duplicate bindings between an exchange
    and a queue.
  * Enhancements
  - Core Server: cluster_formation.target_cluster_size_hint is a
    new configuration setting that can be used to specify expected
    initial cluster size.
  - Prometheus Plugin: Metric rendering efficiency improvements
    (mostly latency).
- Don't install the (now gone) OCF script.
- Refreshed patch:
  * harden_rabbitmq-server.service.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1638446400">- Update to 3.9.11
  * Core Server Bug Fixes
  - When a TLS-enabled listener failed to stop, it logged all of
    its settings which could contain sensitive values.
  * Core Server Enhancements
  - Quorum queues now store commands for enqueued messages in a
    more compact format on disk (some derivative data has been dropped).
  - queue.declare-ok response to AMQP 0-9-1 clients operating on
    a stream could return a ready-for-delivery message count
    value that was out of sync with the stream leader replica.
  - Classic queues now deliver more efficiently on channels that
    had global QoS changed during consumer operation.
  * Prometheus Plugin Enhancements
  - New optional metrics provided by the GET /metrics/detailed
    endpoint. These metrics are cluster-wide, and therefore must
    not be aggregated.
  * Management Agent Plugin Enhancements
  - Disabling the plugin will stop metric collection performed
    periodically by queues, streams, connections, et cetera.
- Changes in 3.9.10:
  * Core Server Bug Fixes
  - Make stream coordinator more defensive to rapid declaration
    and deletion cycles.
  * Core Server Enhancements
  - Several inter-node communication listener settings are now
    exposed to rabbitmq.conf:
    + distribution.listener.port_range.min = 25675
    + distribution.listener.port_range.max = 25675
    + distribution.listener.interface = 192.168.0.1
  * OAuth 2 Plugin Bug Fixes
  - Signing keys specified in rabbitmq.conf were not translated
    correctly, resulting in exceptions during permission checks.
- Drop upstreamed patch
  * harden_rabbitmq-server.service.patch: https://github.com/rabbitmq/rabbitmq-server/pull/3770</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1641470400">- Update to 3.9.12
  * See https://github.com/rabbitmq/rabbitmq-server/blob/v3.9.x/release-notes/3.9.12.md
    for the full changelog.
  * Core Server Bug Fixes and Enhancements
  - (Fix) Authentication and authorization backend exceptions
    could potentially leak user-provided credentials to node log.
  - Unnamed parameters and policies in definition files will now
    be rejected as invalid.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1642593600">- Update to 3.9.13
  * Core Server Bug Fixes and Enhancements
  - Disk space monitor now correctly parses output on (at least
    some) systems where non-ASCII characters are used in paths.
  - Stream leader election is now deterministic when cluster is
    undergoing a rolling upgrade.
  - Queue and binding definition import can be delayed until a
    moment when at least N nodes (e.g. three) have joined the
    cluster.
- Allow building with Elixir 1.13.x
  * Support-Elixir-1.13.patch
  * Elixir-1.13-OptionParser-no-longer-supports-atom-val.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1645272000">- Add zsh BuildRequires to fix "directories not owned by a package"
  in zsh-completion.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1648209600">- Update to 3.9.14
  * See https://github.com/rabbitmq/rabbitmq-server/blob/v3.9.x/release-notes/3.9.14.md
    for the full changelog.
  * Build time compatibility with Elixir 1.13 (gh#rabbitmq/rabbitmq-server#4019)
  - Drop Elixir-1.13-OptionParser-no-longer-supports-atom-val.patch
  - Drop Support-Elixir-1.13.patch
  * Adapt to a breaking Erlang 24.3 LDAP client change.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1652011200">- Update to 3.10.0
  * See https://github.com/rabbitmq/rabbitmq-server/blob/v3.10.x/release-notes/3.10.0.md
    for the full changelog.
  * Potentially breaking changes
  - Messages delivered by a quorum queue and negatively acknowledged
    with a requeue will be added to the back of the queue until the
    queue has redelivery limit set. With a redelivery limit, requeueing
    will use the original position of the message if possible.
  - idle_since field now uses RFC 3339 format.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652270400">- add upstream signing key and verify source signature</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1653134400">- Update to 3.10.2
  * Default log level used a four-character severity abbreviation
    instead of more common longer format, for example, warn instead
    of warning.
  * Fix CLI tools failed to run on Erlang 25</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1655553600">- Update to 3.10.5
  * Quorum queue could run into an exception when dead lettering a message
    under certain conditions.
- Changes from 3.10.4
  * Avoid seeding default user in old clusters that still use the deprecated
    management.load_definitions option.
  * Streams could run into an exception or fetch stale stream position
    data in some scenarios.
  * rabbitmqctl set_log_level did not have any effect on logging via
    amq.rabbitmq.log</changelog>
  <changelog author="dimstar@opensuse.org" date="1666785600">- Update to version 3.10.10:
  + Core Server
  * Partially reverts an unsafe inter-node communication
    optimization that could affect classic mirrored queue
    operation ordering.
  * Classic mirrored queue leader replica issued to much credit
    to follower replicas, resulting in an uneven load and
    memory footprint between them.
  * Intra-cluster communication link metric collector could run
    into an exception when peer connection has just been
    re-established, e.g. after a peer node restart.
  + MQTT Plugin
  * When a node was put into maintenance mode, it closed all MQTT
    client connections cluster-wide instead of just local client
    connections.
- For updates between 3.10.5 and 3.10.9, please see
  https://www.rabbitmq.com/changelog.html</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1667995200">- Update to 3.11.3
  + Core Server
  * Stream unsubscription leaked metric counters.
  * Stream could become unavailable in certain node or network
    failure scenarios.
  * It is now possible to pre-configure virtual host limits for
    groups of virtual hosts.
  * Quorum queue replicas no longer try to contact their unreachable
    peers for metrics.
  + CLI Tools
  * rabbitmq-diagnostics status now handles server responses where
    free disk space is not yet computed.
  * All enabled (explicitly or as a dependency) plugins are scanned.
  * rabbitmq-diagnostics memory_breakdown now returns results much
    faster in environments with a large number of quorum queues.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1685966400">- Update to 3.12.0
  * Optimizations for both quorum and classic queues: improved throughput,
    lower throughput variability, lower latency, lower memory footprint
  * More mature and efficient implementation of (non-mirrored) classic
    queues v2 (CQv2)
  * Classic queue lazy and non-lazy modes no longer apply: classic
    queues v2 always behave very similarly
  * to the lazy mode in earlier release series: moving data to disk
    aggressively and only keeping a subset of data in memory
  * Significantly reduced MQTT and Web MQTT memory footprint per connection
  * OAuth 2, OIDC, IDP support
  * Even more configurability of the OAuth 2 plugin
- More bugfixes and enhancements:
  https://www.rabbitmq.com/changelog.html</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1689681600">- Improve erlang-rabbitmq-client Provides:
  The package provides two erlang applications: amqp_client and rabbit_common
  which are expected to be Required as erlang-%{appname}</changelog>
  <changelog author="dmueller@suse.com" date="1698580800">-  update to 3.12.7:
  * Stream replication connections configured to use exclusively
    TLSv1.3 failed.
  * On startup, stream replicas will handle one more potential
    case of segment file corruption after an unclean shutdown.
  * `default_policies.*.queue_pattern` definition in
    `rabbitmq.conf` was incorrectly parsed.
  * Avoid log noise when inter-node connections frequently fail
    and recover.
  * Optimized stream index scans. Longer scans could result in
    some replicas stopping with a timeout.
  * Classic queue storage version is now a supported key for
    operator policies.
  * Queue length limit overflow behavior now can be configured
    via operator policies.
  * Several `list_stream_*` commands (available via both
    `rabbitmq-diagnostics` and `rabbitmq-streams`) commands now
    can display replica node in addition to other fields.
  * `rabbitmqctl add_user` now can accept a pre-generated salted
    password instead of a plain text password, both as a
    positional argument and via standard input:
  * Message consumption with the "Nack message, requeue: true"
    option did not actually requeue deliveries.
  * HTTP API request body size is now limited to 10 MiB by
    default.
  * Two endpoints, one that accepts messages for publishing
    (note: publishing over the HTTP API is greatly discouraged)
  * and another for definition import,
  * will now reject larger transfers with a `400 Bad Request`
    response.
  * `DELETE /api/queues/{vhost}/{name}` now can delete exclusive
    queues.
  * Key supported by operator policies are now grouped by queue
    type in the UI.
  * Improved data safety for confirms in environments where the
    plugin uses classic queues.
  * Avoid an exception when a not fully established MQTT-over-
    WebSockets connection terminated.
  * Recovery of bindings of durable queues bound to a transient
    JMS topic exchange failed.
  * Recovery of bindings of durable queues bound to a transient
    `x-modulo-hash` exchange failed.
  * Recovery of bindings of durable queues bound to a transient
    recent history exchange failed.
  * `osiris` has been upgraded to `1.6.9`
  * Queue recovery on node restart in certain conditions could
    run into an exception
  * `file_handle_cache` operations are now safer when handling
    non-existent keys.
  * Fixed a potential resource leak in at-least-once dead
    lettering from quorum queues.
  * AMQP 1.0 clients that try to publish in a way that results in
    the message not being routed anywhere are now notified with
    a more sensible settlement status.
  * Prometheus scraping API endpoints now support optional
    authentication.
  * The plugin now filters out values that are `undefined` or
    `NaN`, simply excluding them from the API endpoint response.
    Previously, if a metric was not computed for any reason (e.g.
    free disk space monitor was disabled on the node),
    its value could end up being rendered as `undefined` or `NaN`,
    two values that Prometheus scrapers cannot handle (for
  * The plugin will now enforce maximum STOMP frame size. Frames
    larger than that size will be rejected. The default maximum
    size is 4 MiB. It can be increased or decreased:
  * ``` ini
  * # increase maximum supported STOMP frame size to 10 MiB
  * stomp.max_frame_size = 10485760
  * ```
  * To reduce it from the default 4 MiB to 2 MiB:
  * ``` ini
  * # 2 MiB
  * stomp.max_frame_size = 2097152
  * ```
  * Shovel will gracefully stop when its destination (target)
    does not exist.
  * Such shovels will then be periodically restarted to retry.
  * It is now possible to opt in to deactivate file handle cache
    use in the plugin:
  * ``` ini
  * web_mqtt.use_file_handle_cache = false
  * ```
  * It is now possible to opt in to deactivate file handle cache
    use in the plugin:
  * ``` ini
  * web_stomp.use_file_handle_cache = false
  * ```
  * `ra` was upgraded to `2.6.3`
  * Declaration of a classic queue could run into an exception.
  * Classic queues v1 (CQv1) that had a backlog of messages
    stored by 3.9 and earlier versions could run into an exception
    during queue index recovery after an upgrade to 3.10.x or any
    later series.
  * Nodes that had a large number of quorum queues could observe
    accumulation of Erlang processes under significant load.
  * Feature flag discovery on a newly added node could discover
    an incomplete inventory of feature flags.
  * Feature flag discovery operations will now be retried
    multiple times in case of network failures.
  * Nodes in clusters that had quorum queues and non-mirrored
    classic queues on stopped (or failed) nodes could run into an
    exception.
  * The same exception could affect `rabbitmqctl list_queues`.
  * Proxy Protocol v2 LOCAL packets were not supported.
  * When a quorum queue does not find its local replica data
    files on boot, it will now log a warning.
  * An attempt to clear limits of a non-existent virtual host
    failed with a 500 status code.
  * The "Queues" tab in the UI was renamed to "Queue and Streams"
    to better reflect its contents.
  * New HTTP API endpoints for quorum queue replica management,
    equivalent to the `rabbitmq-queues` commands that manage replicas.
  * ```
  * POST /api/queues/quorum/{vhost}/{name}/replicas/add
  * DELETE /api/queues/quorum/{vhost}/{name}/replicas/remove
  * POST /api/queues/quorum/replicas/on/{node}/grow
  * DELETE /api/queues/quorum/replicas/on/{node}/shrink
  * ```
  * Stream client connections that authenticated using x.509
    certificates failed.
  * Only set OAuth 2 client's CA certificate file setting when it
    is defined.
  * The plugin will now accept JWT tokens without a `scope`. Such
    tokens would only be useful when the plugin is used exclusively
    for authentication and not authorization.
  * `oauth2` is now an accepted alias for the OAuth 2
    authentication and authorization backend:
  * ```
  * auth_backends.1 = oauth2
  * ```
  * Previously the only option for OAuth 2 was using a full
    module name, `rabbit_auth_backend_oauth2`.
  * STOMP plugin log entries had an extra line feed character.
  * `ra` was upgraded to `2.6.2`</changelog>
  <changelog author="dmueller@suse.com" date="1702814400">- update to 3.12.10:
  * Avoids two Shovels being started after an upgrade from 3.12.6
    or older versions.
  * When a topic permission was deleted, an internal event of type
    permission.deleted was emitted in some cases, instead of
    topic.permission.deleted.
  * Shovels on 3.12.8 nodes failed during a rolling cluster upgrade
    due to internal identifier format changes.
  * Avoids an unnecessary warning in the logs.
  * avoids a potential exception in the autoheal partition handler.
  * raft.segment_max_entries is now validated to prevent the value
    from overflowing its 16-bit segment file field. Maximum
    supported value is now 65535.</changelog>
  <changelog author="dmueller@suse.com" date="1704542400">- update to 3.12.11:
  * Quorum queue declared when one of cluster nodes was down
    could trigger connection exceptions.
  * Avoids a rare exception that could stop TCP socket writes on
    a client connection.
  * `queue_deleted` and `queue_created` internal events now
    include queue type as a module name, and not an inconsistent
    (with the other queue and stream types) value `classic`.
  * Definition files that are virtual host-specific cannot be
    imported on boot. Such files will now be detected early and
    the import process will terminate after logging a more
    informative message.
  * Several AMQP 1.0 application properties are now more
    correctly converted to AMQP 0-9-1 headers by
    cross-protocol Shovels.
  * The priority property now populates an AMQP 1.0 header with
    the same name, per AMQP 1.0 spec.
  * Metric label values now escape certain non-ASCII characters.
  * Avoids an exception when an MQTT client that used a QoS 0
    subscription reconnects and its original connection node
    is down.
  * Avoids an exception when an MQTT client connection was force-
    closed via the HTTP API.
  * Certain CLI commands could not be run in a shell script loop,
    unless the script explicitly redirected standard input.
  * `rabbitmq-diagnostics cluster_status` now responds much
    quicker when a cluster node has gone down, were shut down,
    or otherwise has become unreachable by the rest of the cluster.
  * Reverted a change to `DELETE /api/queues/{vhost}/{name}` that
    allowed removal of exclusive queues and introduced
    unexpected side effects.
  * `DELETE /api/policies/{vhost}/{policy}` returned a 500
    response instead of a 404 one when target virtual host did
    not exist.
  * Avoid log noise when an HTTP API request is issued against a
    booting or very freshly booted node.
  * HTTP API endpoints that involves contacting multiple nodes
    now respond much quicker when a cluster node
    has gone down, were shut down, or otherwise has become
    unreachable by the rest of the cluster
  * Definition exported for just one virtual host cannot be
    imported at node boot time.
  * Now such files are detected early with a clear log message
    and immediate node boot process termination.
  * To obtain source code of the entire distribution, please
    download the archive named `rabbitmq-server-3.12.11.tar.xz`
    instead of the source tarball produced by GitHub.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707220800">- Provide user/group for RPM 4.19 (boo#1219532).</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Update to 3.13.1
  * Highlights
    Khepri now can be used as an alternative schema data store in RabbitMQ, replacing Mnesia
    MQTTv5 support
    Support for consumer-side stream filtering
    A new common message container format used internally, based on the AMQP 1.0 message format
    Improved classic non-mirrored queue performance with message sizes larger than
    4 KiB (or a different customized CQ index embedding threshold)
    Classic queues storage implementation version 2 (CQv2) is now highly recommended for all new deployments.
    CQv2 meaningfully improves performance of non-mirrored classic queues for most workloads
  * Fixes bsc#1222591</changelog>
  <changelog author="simonf.lees@suse.com" date="1717156800">- Create a versioned package for SLES
-  The following bugfixes and CVE's were fixed upstream
  (bsc#1186203,CVE-2021-22116), (bsc#1187818, CVE-2021-32718),
  (bsc#1187819, CVE-2021-32719) (bsc#1199431),
  (bsc#1205267), (bsc#1216582, CVE-2022-31008)</changelog>
</package>
<package pkgid="703aa6f5cd6a645d425a16f97e19255f06172766f330677a1f8e1ea36e81e9ad" name="erlang-rabbitmq-client313" arch="x86_64">
  <version epoch="0" ver="3.13.1" rel="150600.13.5.3"/>
  <changelog author="qydwhotmail@gmail.com" date="1637323200">- Update to 3.9.9:
  * Core Server Bug Fixes
  - Fixed an issue where node monitor could produce a false network
    partition when one of the cluster members was restarted.
  - Message store resiliency improvements.
  - Reduced log noise in certain scenarios where a new queue leader
    is elected.
  - Queue leader rebalancing now logs less.
  * Prometheus Plugin Bug Fixes
  - TLS-enabled Prometheus endpoint listener port was not correctly
    stored internally.
  * Management Plugin Bug Fixes
  - Persistent message count is now displayed correctly on
    individual queue pages.
  - Restore compatibility with IE 11.
  * Consistent Hashing Exchange Plugin Bug Fixes
  - Corrected deletion of duplicate bindings between an exchange
    and a queue.
  * Enhancements
  - Core Server: cluster_formation.target_cluster_size_hint is a
    new configuration setting that can be used to specify expected
    initial cluster size.
  - Prometheus Plugin: Metric rendering efficiency improvements
    (mostly latency).
- Don't install the (now gone) OCF script.
- Refreshed patch:
  * harden_rabbitmq-server.service.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1638446400">- Update to 3.9.11
  * Core Server Bug Fixes
  - When a TLS-enabled listener failed to stop, it logged all of
    its settings which could contain sensitive values.
  * Core Server Enhancements
  - Quorum queues now store commands for enqueued messages in a
    more compact format on disk (some derivative data has been dropped).
  - queue.declare-ok response to AMQP 0-9-1 clients operating on
    a stream could return a ready-for-delivery message count
    value that was out of sync with the stream leader replica.
  - Classic queues now deliver more efficiently on channels that
    had global QoS changed during consumer operation.
  * Prometheus Plugin Enhancements
  - New optional metrics provided by the GET /metrics/detailed
    endpoint. These metrics are cluster-wide, and therefore must
    not be aggregated.
  * Management Agent Plugin Enhancements
  - Disabling the plugin will stop metric collection performed
    periodically by queues, streams, connections, et cetera.
- Changes in 3.9.10:
  * Core Server Bug Fixes
  - Make stream coordinator more defensive to rapid declaration
    and deletion cycles.
  * Core Server Enhancements
  - Several inter-node communication listener settings are now
    exposed to rabbitmq.conf:
    + distribution.listener.port_range.min = 25675
    + distribution.listener.port_range.max = 25675
    + distribution.listener.interface = 192.168.0.1
  * OAuth 2 Plugin Bug Fixes
  - Signing keys specified in rabbitmq.conf were not translated
    correctly, resulting in exceptions during permission checks.
- Drop upstreamed patch
  * harden_rabbitmq-server.service.patch: https://github.com/rabbitmq/rabbitmq-server/pull/3770</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1641470400">- Update to 3.9.12
  * See https://github.com/rabbitmq/rabbitmq-server/blob/v3.9.x/release-notes/3.9.12.md
    for the full changelog.
  * Core Server Bug Fixes and Enhancements
  - (Fix) Authentication and authorization backend exceptions
    could potentially leak user-provided credentials to node log.
  - Unnamed parameters and policies in definition files will now
    be rejected as invalid.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1642593600">- Update to 3.9.13
  * Core Server Bug Fixes and Enhancements
  - Disk space monitor now correctly parses output on (at least
    some) systems where non-ASCII characters are used in paths.
  - Stream leader election is now deterministic when cluster is
    undergoing a rolling upgrade.
  - Queue and binding definition import can be delayed until a
    moment when at least N nodes (e.g. three) have joined the
    cluster.
- Allow building with Elixir 1.13.x
  * Support-Elixir-1.13.patch
  * Elixir-1.13-OptionParser-no-longer-supports-atom-val.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1645272000">- Add zsh BuildRequires to fix "directories not owned by a package"
  in zsh-completion.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1648209600">- Update to 3.9.14
  * See https://github.com/rabbitmq/rabbitmq-server/blob/v3.9.x/release-notes/3.9.14.md
    for the full changelog.
  * Build time compatibility with Elixir 1.13 (gh#rabbitmq/rabbitmq-server#4019)
  - Drop Elixir-1.13-OptionParser-no-longer-supports-atom-val.patch
  - Drop Support-Elixir-1.13.patch
  * Adapt to a breaking Erlang 24.3 LDAP client change.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1652011200">- Update to 3.10.0
  * See https://github.com/rabbitmq/rabbitmq-server/blob/v3.10.x/release-notes/3.10.0.md
    for the full changelog.
  * Potentially breaking changes
  - Messages delivered by a quorum queue and negatively acknowledged
    with a requeue will be added to the back of the queue until the
    queue has redelivery limit set. With a redelivery limit, requeueing
    will use the original position of the message if possible.
  - idle_since field now uses RFC 3339 format.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652270400">- add upstream signing key and verify source signature</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1653134400">- Update to 3.10.2
  * Default log level used a four-character severity abbreviation
    instead of more common longer format, for example, warn instead
    of warning.
  * Fix CLI tools failed to run on Erlang 25</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1655553600">- Update to 3.10.5
  * Quorum queue could run into an exception when dead lettering a message
    under certain conditions.
- Changes from 3.10.4
  * Avoid seeding default user in old clusters that still use the deprecated
    management.load_definitions option.
  * Streams could run into an exception or fetch stale stream position
    data in some scenarios.
  * rabbitmqctl set_log_level did not have any effect on logging via
    amq.rabbitmq.log</changelog>
  <changelog author="dimstar@opensuse.org" date="1666785600">- Update to version 3.10.10:
  + Core Server
  * Partially reverts an unsafe inter-node communication
    optimization that could affect classic mirrored queue
    operation ordering.
  * Classic mirrored queue leader replica issued to much credit
    to follower replicas, resulting in an uneven load and
    memory footprint between them.
  * Intra-cluster communication link metric collector could run
    into an exception when peer connection has just been
    re-established, e.g. after a peer node restart.
  + MQTT Plugin
  * When a node was put into maintenance mode, it closed all MQTT
    client connections cluster-wide instead of just local client
    connections.
- For updates between 3.10.5 and 3.10.9, please see
  https://www.rabbitmq.com/changelog.html</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1667995200">- Update to 3.11.3
  + Core Server
  * Stream unsubscription leaked metric counters.
  * Stream could become unavailable in certain node or network
    failure scenarios.
  * It is now possible to pre-configure virtual host limits for
    groups of virtual hosts.
  * Quorum queue replicas no longer try to contact their unreachable
    peers for metrics.
  + CLI Tools
  * rabbitmq-diagnostics status now handles server responses where
    free disk space is not yet computed.
  * All enabled (explicitly or as a dependency) plugins are scanned.
  * rabbitmq-diagnostics memory_breakdown now returns results much
    faster in environments with a large number of quorum queues.</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1685966400">- Update to 3.12.0
  * Optimizations for both quorum and classic queues: improved throughput,
    lower throughput variability, lower latency, lower memory footprint
  * More mature and efficient implementation of (non-mirrored) classic
    queues v2 (CQv2)
  * Classic queue lazy and non-lazy modes no longer apply: classic
    queues v2 always behave very similarly
  * to the lazy mode in earlier release series: moving data to disk
    aggressively and only keeping a subset of data in memory
  * Significantly reduced MQTT and Web MQTT memory footprint per connection
  * OAuth 2, OIDC, IDP support
  * Even more configurability of the OAuth 2 plugin
- More bugfixes and enhancements:
  https://www.rabbitmq.com/changelog.html</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1689681600">- Improve erlang-rabbitmq-client Provides:
  The package provides two erlang applications: amqp_client and rabbit_common
  which are expected to be Required as erlang-%{appname}</changelog>
  <changelog author="dmueller@suse.com" date="1698580800">-  update to 3.12.7:
  * Stream replication connections configured to use exclusively
    TLSv1.3 failed.
  * On startup, stream replicas will handle one more potential
    case of segment file corruption after an unclean shutdown.
  * `default_policies.*.queue_pattern` definition in
    `rabbitmq.conf` was incorrectly parsed.
  * Avoid log noise when inter-node connections frequently fail
    and recover.
  * Optimized stream index scans. Longer scans could result in
    some replicas stopping with a timeout.
  * Classic queue storage version is now a supported key for
    operator policies.
  * Queue length limit overflow behavior now can be configured
    via operator policies.
  * Several `list_stream_*` commands (available via both
    `rabbitmq-diagnostics` and `rabbitmq-streams`) commands now
    can display replica node in addition to other fields.
  * `rabbitmqctl add_user` now can accept a pre-generated salted
    password instead of a plain text password, both as a
    positional argument and via standard input:
  * Message consumption with the "Nack message, requeue: true"
    option did not actually requeue deliveries.
  * HTTP API request body size is now limited to 10 MiB by
    default.
  * Two endpoints, one that accepts messages for publishing
    (note: publishing over the HTTP API is greatly discouraged)
  * and another for definition import,
  * will now reject larger transfers with a `400 Bad Request`
    response.
  * `DELETE /api/queues/{vhost}/{name}` now can delete exclusive
    queues.
  * Key supported by operator policies are now grouped by queue
    type in the UI.
  * Improved data safety for confirms in environments where the
    plugin uses classic queues.
  * Avoid an exception when a not fully established MQTT-over-
    WebSockets connection terminated.
  * Recovery of bindings of durable queues bound to a transient
    JMS topic exchange failed.
  * Recovery of bindings of durable queues bound to a transient
    `x-modulo-hash` exchange failed.
  * Recovery of bindings of durable queues bound to a transient
    recent history exchange failed.
  * `osiris` has been upgraded to `1.6.9`
  * Queue recovery on node restart in certain conditions could
    run into an exception
  * `file_handle_cache` operations are now safer when handling
    non-existent keys.
  * Fixed a potential resource leak in at-least-once dead
    lettering from quorum queues.
  * AMQP 1.0 clients that try to publish in a way that results in
    the message not being routed anywhere are now notified with
    a more sensible settlement status.
  * Prometheus scraping API endpoints now support optional
    authentication.
  * The plugin now filters out values that are `undefined` or
    `NaN`, simply excluding them from the API endpoint response.
    Previously, if a metric was not computed for any reason (e.g.
    free disk space monitor was disabled on the node),
    its value could end up being rendered as `undefined` or `NaN`,
    two values that Prometheus scrapers cannot handle (for
  * The plugin will now enforce maximum STOMP frame size. Frames
    larger than that size will be rejected. The default maximum
    size is 4 MiB. It can be increased or decreased:
  * ``` ini
  * # increase maximum supported STOMP frame size to 10 MiB
  * stomp.max_frame_size = 10485760
  * ```
  * To reduce it from the default 4 MiB to 2 MiB:
  * ``` ini
  * # 2 MiB
  * stomp.max_frame_size = 2097152
  * ```
  * Shovel will gracefully stop when its destination (target)
    does not exist.
  * Such shovels will then be periodically restarted to retry.
  * It is now possible to opt in to deactivate file handle cache
    use in the plugin:
  * ``` ini
  * web_mqtt.use_file_handle_cache = false
  * ```
  * It is now possible to opt in to deactivate file handle cache
    use in the plugin:
  * ``` ini
  * web_stomp.use_file_handle_cache = false
  * ```
  * `ra` was upgraded to `2.6.3`
  * Declaration of a classic queue could run into an exception.
  * Classic queues v1 (CQv1) that had a backlog of messages
    stored by 3.9 and earlier versions could run into an exception
    during queue index recovery after an upgrade to 3.10.x or any
    later series.
  * Nodes that had a large number of quorum queues could observe
    accumulation of Erlang processes under significant load.
  * Feature flag discovery on a newly added node could discover
    an incomplete inventory of feature flags.
  * Feature flag discovery operations will now be retried
    multiple times in case of network failures.
  * Nodes in clusters that had quorum queues and non-mirrored
    classic queues on stopped (or failed) nodes could run into an
    exception.
  * The same exception could affect `rabbitmqctl list_queues`.
  * Proxy Protocol v2 LOCAL packets were not supported.
  * When a quorum queue does not find its local replica data
    files on boot, it will now log a warning.
  * An attempt to clear limits of a non-existent virtual host
    failed with a 500 status code.
  * The "Queues" tab in the UI was renamed to "Queue and Streams"
    to better reflect its contents.
  * New HTTP API endpoints for quorum queue replica management,
    equivalent to the `rabbitmq-queues` commands that manage replicas.
  * ```
  * POST /api/queues/quorum/{vhost}/{name}/replicas/add
  * DELETE /api/queues/quorum/{vhost}/{name}/replicas/remove
  * POST /api/queues/quorum/replicas/on/{node}/grow
  * DELETE /api/queues/quorum/replicas/on/{node}/shrink
  * ```
  * Stream client connections that authenticated using x.509
    certificates failed.
  * Only set OAuth 2 client's CA certificate file setting when it
    is defined.
  * The plugin will now accept JWT tokens without a `scope`. Such
    tokens would only be useful when the plugin is used exclusively
    for authentication and not authorization.
  * `oauth2` is now an accepted alias for the OAuth 2
    authentication and authorization backend:
  * ```
  * auth_backends.1 = oauth2
  * ```
  * Previously the only option for OAuth 2 was using a full
    module name, `rabbit_auth_backend_oauth2`.
  * STOMP plugin log entries had an extra line feed character.
  * `ra` was upgraded to `2.6.2`</changelog>
  <changelog author="dmueller@suse.com" date="1702814400">- update to 3.12.10:
  * Avoids two Shovels being started after an upgrade from 3.12.6
    or older versions.
  * When a topic permission was deleted, an internal event of type
    permission.deleted was emitted in some cases, instead of
    topic.permission.deleted.
  * Shovels on 3.12.8 nodes failed during a rolling cluster upgrade
    due to internal identifier format changes.
  * Avoids an unnecessary warning in the logs.
  * avoids a potential exception in the autoheal partition handler.
  * raft.segment_max_entries is now validated to prevent the value
    from overflowing its 16-bit segment file field. Maximum
    supported value is now 65535.</changelog>
  <changelog author="dmueller@suse.com" date="1704542400">- update to 3.12.11:
  * Quorum queue declared when one of cluster nodes was down
    could trigger connection exceptions.
  * Avoids a rare exception that could stop TCP socket writes on
    a client connection.
  * `queue_deleted` and `queue_created` internal events now
    include queue type as a module name, and not an inconsistent
    (with the other queue and stream types) value `classic`.
  * Definition files that are virtual host-specific cannot be
    imported on boot. Such files will now be detected early and
    the import process will terminate after logging a more
    informative message.
  * Several AMQP 1.0 application properties are now more
    correctly converted to AMQP 0-9-1 headers by
    cross-protocol Shovels.
  * The priority property now populates an AMQP 1.0 header with
    the same name, per AMQP 1.0 spec.
  * Metric label values now escape certain non-ASCII characters.
  * Avoids an exception when an MQTT client that used a QoS 0
    subscription reconnects and its original connection node
    is down.
  * Avoids an exception when an MQTT client connection was force-
    closed via the HTTP API.
  * Certain CLI commands could not be run in a shell script loop,
    unless the script explicitly redirected standard input.
  * `rabbitmq-diagnostics cluster_status` now responds much
    quicker when a cluster node has gone down, were shut down,
    or otherwise has become unreachable by the rest of the cluster.
  * Reverted a change to `DELETE /api/queues/{vhost}/{name}` that
    allowed removal of exclusive queues and introduced
    unexpected side effects.
  * `DELETE /api/policies/{vhost}/{policy}` returned a 500
    response instead of a 404 one when target virtual host did
    not exist.
  * Avoid log noise when an HTTP API request is issued against a
    booting or very freshly booted node.
  * HTTP API endpoints that involves contacting multiple nodes
    now respond much quicker when a cluster node
    has gone down, were shut down, or otherwise has become
    unreachable by the rest of the cluster
  * Definition exported for just one virtual host cannot be
    imported at node boot time.
  * Now such files are detected early with a clear log message
    and immediate node boot process termination.
  * To obtain source code of the entire distribution, please
    download the archive named `rabbitmq-server-3.12.11.tar.xz`
    instead of the source tarball produced by GitHub.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707220800">- Provide user/group for RPM 4.19 (boo#1219532).</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Update to 3.13.1
  * Highlights
    Khepri now can be used as an alternative schema data store in RabbitMQ, replacing Mnesia
    MQTTv5 support
    Support for consumer-side stream filtering
    A new common message container format used internally, based on the AMQP 1.0 message format
    Improved classic non-mirrored queue performance with message sizes larger than
    4 KiB (or a different customized CQ index embedding threshold)
    Classic queues storage implementation version 2 (CQv2) is now highly recommended for all new deployments.
    CQv2 meaningfully improves performance of non-mirrored classic queues for most workloads
  * Fixes bsc#1222591</changelog>
  <changelog author="simonf.lees@suse.com" date="1717156800">- Create a versioned package for SLES
-  The following bugfixes and CVE's were fixed upstream
  (bsc#1186203,CVE-2021-22116), (bsc#1187818, CVE-2021-32718),
  (bsc#1187819, CVE-2021-32719) (bsc#1199431),
  (bsc#1205267), (bsc#1216582, CVE-2022-31008)</changelog>
</package>
<package pkgid="81812d8bc966c0e0b937e30793d504de987c9feadb989930936cae57e97f5ed8" name="erlang26" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="cb12417afc463435911f4e793048f6cdca8dd89c3001bd25ff01e9733a2b832d" name="erlang26" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="f24a561b7bb5147e526b5e82dff09da90e5219568724da1a2514caf11e453daa" name="erlang26" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="a906abab1fa4d865c40cce6a5f2864abc4d9c8cd0433a59c1102f084e9c84fd4" name="erlang26" arch="src">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="69a18ccf9f16f0df11d7299c6fcc6934db0462031b43e76a26dfb4140a62e4c7" name="erlang26" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="1b16add0edcadec67b35516f631beb29cc95982b9c3082573631b868fd9feeb5" name="erlang26-debugger" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="8ca6431ed492fde5a7ee81760e2a1e53d4b69be744d7173c1024020a1214ac8b" name="erlang26-debugger" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="de293a9d2746a4ab73e08f2638af1f39308d8ad96d6e82a88eead61261165485" name="erlang26-debugger" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="f1787414014275522d331e8b28e30a9a91dbebdc5b8079d4732dbd205c50d19e" name="erlang26-debugger" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="d0c5968d54220c01291836c6cfc82a03285de9063ab4ae3591988685f8006940" name="erlang26-debugger-src" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="30df86393b22f51d344a21826ecf0192a1d5103e78fa36cf62a35a7d5b99e974" name="erlang26-debugger-src" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="edaddb118ad09e5404a1897bc4d25d7a6f2e42df3f8e82489ea19b91f7a8ef5e" name="erlang26-debugger-src" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="ea2cf4ac08f9431f7904f03f05a5ac68f07c8f6d29eec866bfcacfa224654e56" name="erlang26-debugger-src" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="d1ed8dd6ee0386465fa44f3fc5e7a1eb5dfb76fdc1892ea3959eba525578997f" name="erlang26-dialyzer" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="abe7cbc4c70c3edf4f5362e3209c731433665809a9490de80a4062a6441fe89f" name="erlang26-dialyzer" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="6418d611839364049d0ff5b42fc6e4d53a2a7c9e28ea582fed99d61d6b6cca76" name="erlang26-dialyzer" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="bc4935ac5860d566928fce8111e4d6717620705c97175b8ce2aaae128cde1393" name="erlang26-dialyzer" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="26a350ab6f9e1230cda3a94ad0a50c53e78e4d34149d7c026e0b57dbd8e5207d" name="erlang26-dialyzer-src" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="fd105cb8d8a4424a286ac5521c368ff8e1b9e75744e0c7e24169ef3b31366c64" name="erlang26-dialyzer-src" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="1259b92986c231f05223c60d54191278af379f10528ca4b77e4bb9510cbec3a9" name="erlang26-dialyzer-src" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="22774687311c9c28132e16f0ae3e84e6a371e50d315eaaa201fea8b4fc00cbb7" name="erlang26-dialyzer-src" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="d2b571a1a3b05042ac3f4956b46a68b8c679bb20728e86eda91e6700e66239bc" name="erlang26-diameter" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="5870800795f99635474d353686a4062e5e72a605c491e406662930bfd95dc7a2" name="erlang26-diameter" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="f09c9ab0b7d7d00b0b1e9020d6be0a0fafe3d4648864765860820773bc1384e9" name="erlang26-diameter" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="0d0f3ca56fd0afa4ce245372bb88b1c9c6d900e76705bc868d8c44c7c64d8693" name="erlang26-diameter" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="a89d23deda21a16f9032e7fea1c00297a63cc41fa8cded8683a6515562932e01" name="erlang26-diameter-src" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="08214fa8a61fe205b40f1b507c555becdc1507224a63073fa804685e372d7153" name="erlang26-diameter-src" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="d05ddd91b3d8086647e7fcda09abaeaaa78ca38e7ddde84728e4075577477aa0" name="erlang26-diameter-src" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="cb43b0c458cf3a56859311a31ce8d56e78ad7c5a20151172e7307651360cc889" name="erlang26-diameter-src" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="73a7a9b5e0cc15411ccf1944a7c80b4696a558203aeced70171cdff28d54c7f8" name="erlang26-doc" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="652a65877e48b26a0ff2718741d77c53f5b9a6ea28fef907e60430afe22214ad" name="erlang26-doc" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="d09a19dc00b4ac1279576e26b4e2bd5b3a8679bd98f643e02410c66580222740" name="erlang26-doc" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="b1aa358f22f0fe0c15acba88e73cdef14cd9a192b71e63b1835201383a794f89" name="erlang26-doc" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="2acc953d6a1e3db437c5f45ef187d5b1bf840b0cf5639b7eea06e740456bf4a7" name="erlang26-epmd" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="f2f12ae7551d1eeebd5bdcfc5baa96a3d0195728213cf51866f78003ba1bb96b" name="erlang26-epmd" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="2862012d38144cf65033faaab1fe13da242f566c07255420fdd917e9d7ffc3bc" name="erlang26-epmd" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="4a1bba3ffe58d19bf51134cae31650e5df4800a605becec838c2f719bcd246cd" name="erlang26-epmd" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="29ecb1756cce61260d278680d1514f26c438a169316cbb27579184c3d9150ba7" name="erlang26-et" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="760f95456bf68a10a54143a2d3c2ba5ec5b246991c8ce1a3b41de3f8e88ecf05" name="erlang26-et" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="ac0fd619be772c84c1c6d48b3f68c5add6e251dad66acda8b84287445295d608" name="erlang26-et" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="7e9d110af43dac872c2396b366ae846ffd9ebbfdb57468ab6aedf0c80911ffb7" name="erlang26-et" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="dc7e81bfe3a5736f299bd5ae7e0e41c2d11d89ddbfcb963c3b2a6ed50e11f034" name="erlang26-et-src" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="81022b0838936ed1e9c6d307b894867d85e5315508efbd12bb744faf41ce20b2" name="erlang26-et-src" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="367966675679505f00bfe385a2f7922c640e7afe8d9475a7f2717bb216f24065" name="erlang26-et-src" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="5d3b72b0279de31483a1f181f01f7a7b5fc76a9816b7d26bf8ed8cbaf11cd72f" name="erlang26-et-src" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="46d7966f4be388cf22dcd755b802c3b79360b746bfb60cafd3e7b59079457542" name="erlang26-jinterface" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="60b26bb1848052e58f7bff2db108546f93c9bc077e6d44f2a297828b77c1a0a5" name="erlang26-jinterface" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="1614a1bd4f45894099049f92354632f5f5a5db1d2d165a39313703acc5188709" name="erlang26-jinterface" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="26e5a77eaf08fff9699b61120b932bf902c387ee97cc5f990f91a275addb214e" name="erlang26-jinterface" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="775d893bf4e0275c2767e7a5d59982c026c2d68fc625387f7c551f5c8a04a429" name="erlang26-jinterface-src" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="4f4fdcac17aaa04b0e19efde191970820f2267c15db356842be1012d70d1fd15" name="erlang26-jinterface-src" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="e5be12e26d624c6c08869fed155ac999d17f3bb55d44789ec1bbd68cb6f8fff8" name="erlang26-jinterface-src" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="2d80559f0cad63d4b3198d7846ffd16d742c35c8c2581a9cae43d2355cc461e7" name="erlang26-jinterface-src" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="d05188287c4b74ec8f601952ad1c4569e65302013456e18317e1403061130695" name="erlang26-observer" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="4c70b5a35fc01d27a5fcc843c8b7d003e0720010777d1f18de4d79eea4d23d7f" name="erlang26-observer" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="e3d1b8ce07e9ad12cdbbdc3e800e6ec992e48dfae71054134a4fd84f719f78e0" name="erlang26-observer" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="ac29404344c9df7165bbc1843c90138f40381dfd34cf769edee76d345a72e267" name="erlang26-observer" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="b9cb39934e76981d36f5edd284e51d7e9f8bc2bf13e94281c55b82daeb7b4d89" name="erlang26-observer-src" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="d7760e62c35a4c9908187090a2d4c4caec886e9d1ff790f7d193c06a178f4d0e" name="erlang26-observer-src" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="8488d70f33686383a47fee046955729de271bd335fa44ac5335205286773e3c0" name="erlang26-observer-src" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="7517494356ee7bbb5a85ff015249453609ce5f78ba697a21040bd1735c696446" name="erlang26-observer-src" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="f3598f46ea7c51569f364f8df10cfcf6f5f6e02922e95734f39bfbd051a845b2" name="erlang26-reltool" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="fe255451f8aa3d5f45f28c10837e889d891699bbac75b01a0970e882d1e611f6" name="erlang26-reltool" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="6ff0679ffc19d0e4969bca256cab2a5d0cc2787353fc54250364eae74d6a964f" name="erlang26-reltool" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="7931ded6253b732af4fee649673aad385678f399070cbe02ca7050cf92479184" name="erlang26-reltool" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="5b16a3245105c8e30a22afad725d8b88c352c41c2dfa38c02c139c3785483640" name="erlang26-reltool-src" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="28d23e768d81983376dcd19615aaeb4e78512e38adbc26f4a8e5ce82e1e89001" name="erlang26-reltool-src" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="b76f526ec461c32a0276a304417204e2b586748a6a2b84cb326dcd72d2d12ab6" name="erlang26-reltool-src" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="887b784981b7a4900b904ec1c374cf46f4dd12cf44a1b13e4ab88fbb5fa83e47" name="erlang26-reltool-src" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="192d1bee6646583f8e215a89cb8a6a9cbc304e8d9af373ce28dc67efbad4c935" name="erlang26-src" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="97156a059733c8ac259c5954e03b9a11e4c126417c37abeb93a26405aaa932f4" name="erlang26-src" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="bfb25898c1bcb114889d7bdc17f0a88d1c6fb88d1d84f53db0d90498b26e8eb3" name="erlang26-src" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="53a88679736bf706a47b9c98b425b2b583cdd7d66d936693174ea69c7b6106c3" name="erlang26-src" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="a980ef67a2e21e37ffa3116aa64e650d4fa71421e3a0271804db7ab0de5ad1bc" name="erlang26-wx" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="fe03430f2b1b7e9d2a8dab3bd5369f614d5c569573b7d976c9c9836c5c106f78" name="erlang26-wx" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="f318e73932d34c6a126ae68c4e233ee418f66c0e47b7202dd57ffc4c79c14c52" name="erlang26-wx" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="b1b953ca19a894571ef476ce05f4e31ecbd507b79997d8987a77bbb80fb0c4cf" name="erlang26-wx" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="188b4dcc9ba1c5151b97a40400f7f13a63265787c84919a71ce7496621f02aff" name="erlang26-wx-src" arch="aarch64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="540b300cd8863ad4cd6842205a928ccb530d53e5e7858456000807848ea1f9bf" name="erlang26-wx-src" arch="ppc64le">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="36efbb44d46c40956ed8bc466d6204cd42faf3bc985d7978cdd7aa2c50a42d13" name="erlang26-wx-src" arch="s390x">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="c054c1511dfa070725ddc548acdc519f2dc5b075229008779c10a0e47e9663ac" name="erlang26-wx-src" arch="x86_64">
  <version epoch="0" ver="26.2.1" rel="150300.7.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1646568000">- Changes for 24.2.2:
  * inets: Avoid intermediate ungraceful shutdown of the HTTP
    server.
  * ssh: The ssh sever parallel_login option was missing in OTP-24</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1648382400">- Changes for 24.3.2:
  * erl_interface: Fix compile error regarding gethostbyaddr_r on
    Android. Error introduced in OTP 24.3.
  * kernel: Fix failed accepted connection setup after previous
    established connection from same node closed down silently.
  * kernel: Fixed a problem where typing Ctrl-R in the shell could
    hang if there were some problem with the history log file.
- Changes for 24.3.1:
  * dialyzer: There could be spurious warnings for unknown types
    when a type was a subtype of an existing type that was a
    subtype of an unknown type.
  * ssl: Client certification could fail for TLS-1.3 servers that
    did not include the certificat_authorties extension in its
    certificate request message.
- Changes for 24.3:
  * megaco: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * megaco: Update the performance and debug chapters of the megaco
    user's guide. Also some updates to the meas tools.
  * compiler: The expression &lt;&lt;0/native-float&gt;&gt;=Bin would always
    fail to match, while &lt;&lt;0/float-native&gt;&gt;=Bin would match
    (provided that Bin contained the binary representation of 0.0)
  * compiler: The compiler will now compile huge functions with
    straight-line code faster.
  * erl_interface: Add --enable-ei-dynamic-lib configure option
    that will make erl_interface also release a dynamic library
    version of libei.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * sasl: Fix bug in systools:make_script/1 documentation.
  * inets: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * inets: Documentation fix for inets:services_info/0, which now
    describes that Info might be a Reason term() in case when
    {error, Reason} is returned as service info.
  * crypto: The crypto app in OTP can since OTP-24.2 be compiled,
    linked and used with the new OpenSSL 3.0 cryptolib. The crypto
    app has 3.0 support has been improved, but is still *not
    recommended* for other usages than experiments and alpha
    testing. There are not yet any guaranties that it works, not
    even together with other OTP applications like for example SSL
    and SSH, although there are no known errors. Since the previous
    release, OTP-24.2, the following improvements have been done: -
    It has been tested during nearly every nightly test on the OTP
    lab - The hash algorithms md4 and ripemd160 have been enabled
    with OpenSSL 3.0. - The ciphers blowfish_cbc, blowfish_ecb,
    des_cbc, des_cfb, des_ecb, rc2_cbc and rc4 have been enabled
    with OpenSSL 3.0. Disabled or unsupported with OpenSSL 3.0 are
    still: - ENGINE support - FIPS mode - Other providers than the
    built-in ones - Compiling and linking with OpenSSL 3.0
    cryptolib in compatibility modes (for example to behave as
    1.1.1) and, the ciphers blowfish_cfb64 and blowfish_ofb64 are
    not supported and will not be either. Deprecated functions in
    the OpenSSL 3.0 cryptolib must not be disabled as OTP/crypto
    still uses some of the deprecated API functions. The gcc flag
  - Wno-deprecated-declarations is set to prevent deprecation
    warnings to be printed when compiling.
  * crypto: Crypto is adapted to LibreSSL 3.5.0 on OpenBSD.
  * crypto: New configure option ( --disable-otp-test-engine) to
    prohibit the build of the OTP test engine used in some test
    suites. The reason is that the test engine could be hard to
    compile on for instance LibreSSL 3.5.0. For that particular
    cryptolib version (or higher), this configure option is set
    automatically.
  * jinterface: Fix bug in OtpOutputStream.write_pid/4 and
    write_ref/3 causing faulty encodig. Bug exists since OTP 23.0.
  * wx: Removed the static_data option from wxImage creation
    functions, as it was broken and could lead to crashes. Now
    image data is always copied to wxWidgets as was the default
    behavior. Removed some non working wxGridEvent event types,
    which have there own events in newer wxWidgets versions, and
    added a couple of event types that where missing in wx.
  * asn1: Add support for the maps option in combination with the
    jer backend.
  * snmp: The compilation time is no longer recorded in BEAM files.
    There remained several undocumented functions that attempted to
    retrieve compilation times. Those have now been removed.
  * snmp: [agent] Remove expectation of socket being a port.
  * common_test: OTP internal test fix.
  * runtime_tools: Fixed bug in scheduler:utilization(Seconds) that
    would leave the scheduler_wall_time system flag incorrectly
    enabled.
  * runtime_tools: Add scheduler:get_sample/0 and get_sample_all/0.
    Also clarify scheduler module documentation about how it
    depends on system flag scheduler_wall_time.
  * erts: Fixed a bug in the x86 JIT that might cause floating
    point instructions to wrongly throw an exception.
  * erts: Preserve correct nodedown_reason if supervised
    distribution controller processes exit with {shutdown, Reason}.
  * erts: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * erts: By default global does not take any actions to restore a
    fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * erts: Corrected the type specification of erlang:seq_trace/2.
  * erts: Fix memory leak when tracing on running on a process that
    only handle system tasks or non-message signals (for example
    process_info requests).
  * erts: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * erts: Show on_load failure reasons in embedded mode.
  * erts: Compile date saved in the Erlang VM executable has been
    removed.
  * erts: Improve documentation for the dynamic node name feature.
  * ssh: Fix makefile dependency bugs.
  * ssh: Fixed faulty OpenSSH decoding of Ed25519/Ed448 keys in the
    OpenSSH format openssh_key_v1.
  * ssh: Correction of ssh_file typing, specially for the
    experimental openssh-key-v1 encoding.
  * ssh: Improper tag for private ED keys when encoding with
    ssh:encode/2. The tuple had ed_priv as first element, but
    should have had ed_pri. This is now corrected. *** POTENTIAL
    INCOMPATIBILITY ***
  * ssh: Add support for Ed25519/Ed448 SSH host keys in the RFC
    4716 format ("-----BEGIN EC PRIVATE KEY-----") generated by for
    example openssl or via Erlang functions (i.e.
    public_key:generate_key({namedCurve, ed25519})). Ed25519 SSH
    host keys generated by ssh-keygen was, and are still,
    supported.
  * kernel: Handling of send_timeout for gen_tcp has been corrected
    so that the timeout is honored also when sending 0 bytes.
  * kernel: By default global does not take any actions to restore
    a fully connected network when connections are lost due to
    network issues. This is problematic for all applications
    expecting a fully connected network to be provided, such as for
    example mnesia, but also for global itself. A network of
    overlapping partitions might cause the internal state of global
    to become inconsistent. Such an inconsistency can remain even
    after such partitions have been brought together to form a
    fully connected network again. The effect on other applications
    that expects that a fully connected network is maintained may
    vary, but they might misbehave in very subtle hard to detect
    ways during such a partitioning. In order to prevent such
    issues, we have introduced a prevent overlapping partitions fix
    which can be enabled using the prevent_overlapping_partitions
    kernel(6) parameter. When this fix has been enabled, global
    will actively disconnect from nodes that reports that they have
    lost connections to other nodes. This will cause fully
    connected partitions to form instead of leaving the network in
    a state with overlapping partitions. Note that this fix has to
    be enabled on all nodes in the network in order to work
    properly. Since this quite substantially changes the behavior,
    this fix is currently disabled by default. Since you might get
    hard to detect issues without this fix you are, however,
    strongly advised to enable this fix in order to avoid issues
    such as the ones described above. As of OTP 25 this fix will
    become enabled by default.
  * kernel: Fix bug where logger would crash when logging a report
    including improper lists.
  * kernel: Make erlang:set_cookie work for dynamic node names.
  * kernel: Add support for using socket:sockaddr_in() and
    socket:sockaddr_in6() when using gen_sctp, gen_tcp and gen_udp.
    This will make it possible to use Link Local IPv6 addresses.
  * kernel: A net_tickintensity kernel parameter has been
    introduced. It can be used to control the amount of ticks
    during a net_ticktime period. A new net_kernel:start/2 function
    has also been introduced in order to make it easier to add new
    options. The use of net_kernel:start/1 has been deprecated.
  * kernel: Improve documentation for the dynamic node name
    feature.
  * erl_docgen: Fix css for large tables and images on small
    screens
  * erl_docgen: Fix bug with codeinclude tag that caused it to not
    include the code if used in a correct, but unexpected way.
  * observer: Calculate the display width in etop, instead of hard-
    coding it to 89 characters.
  * debugger: Fix record index matching, it was broken and could
    never match.
  * ssl: Improved error handling.
  * ssl: Before this change, net_kernel used with TLS distribution
    might be leaking processes in case of connectivity issues.
  * ssl: Fix makefile dependency bugs.
  * ssl: Make sure the TLS sender process handles explicit calls to
    erlang:disconnect_node properly, avoiding potential hanging
    problems in net_kernel.
  * ssl: Add support for TLS-1.3 certificate_authorities extension.
    And process certificate_authorities field in pre-TLS-1.3
    certificate requests.
  * ssl: Support password fun for protected keyfiles in ssl:connect
    function.
  * ssl: Add in some cases earlier detection of possible DoS
    attacks by malicious clients sending unexpected TLS messages
    instead of the client hello. Note that such attacks are already
    mitigated by providing a timeout for the TLS handshake.
  * eldap: Fix eldap extensibleMatch dnAttributes option. According
    to the ldap ASN1 the dnAttributes should be a bool, instead it
    was generated as a string.
  * eldap: Implemented paged searches according to https://www.rfc-
    editor.org/rfc/rfc2696.txt
  * public_key: Support password fun for protected keyfiles in
    ssl:connect function.
  * stdlib: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.
  * mnesia: Reduce the number of locks taken during table copying,
    should reduce the startup time on large systems.
  * diameter: The compilation time is no longer recorded in BEAM
    files. There remained several undocumented functions that
    attempted to retrieve compilation times. Those have now been
    removed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1649246400">- Fix build for Factory. Currently, any Java version
  is fine for Erlang.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1653220800">- Version 25.0:
  - stdlib
  * New function filelib:ensure_path/1 will ensure that all
    directories for the given path exists
  * New functions groups_from_list/2 and groups_from_list/3 in
    the maps module
  * New functions uniq/1 uniq/2 in the lists module
  * New PRNG added to the rand module, for fast pseudo-random
    numers.
  - compiler, kernel, stdlib, syntax_tools:
  * Added support for selectable features as described in EEP-60.
    Features can be enabled/disabled during compilation with
    options (ordinary and +term) to erlc as well as with
    directives in the file. Similar options can be used to erl
    for enabling/disabling features allowed at runtime. The new
    maybe expression EEP-49 is fully supported as the feature
    maybe_expr.
  - erts &amp; JIT:
  * The JIT now works for 64-bit ARM processors.
  * The JIT now does type-based optimizations based on type
    information in the BEAM files.
  * Improved the JIT’s support for external tools like perf and
    gdb, allowing them to show line numbers and even the original
    Erlang source code when that can be found.
  - erts, stdlib, kernel:
  * Users can now configure ETS tables with the
    {write_concurrency, auto} option. This option forces tables
    to automatically change the number of locks that are used at
    run-time depending on how much concurrency is detected. The
    {decentralized_counters, true} option is enabled by default
    when {write_concurrency, auto} is active.
  * Benchmark results comparing this option with the other ETS
    optimization options are available here: benchmarks.
  * To enable more optimizations, BEAM files compiled with OTP 21
    and earlier cannot be loaded in OTP 25.
  * The signal queue of a process with the process flag
    message_queue_data=off_heap has been optimized to allow
    parallel reception of signals from multiple processes. This
    can improve performance when many processes are sending in
    parallel to one process. See benchmark.
  * The Erlang installation directory is now relocatable on the
    file system given that the paths in the installation’s
    RELEASES file are paths that are relative to the
    installations root directory.
  * A new option called short has been added to the functions
    erlang:float_to_list/2 and erlang:float_to_binary/2. This
    option creates the shortest correctly rounded string
    representation of the given float that can be converted back
    to the same float again.
  * Introduction of quote/1 and unquote/1 functions in the
    uri_string module - a replacement for the deprecated
    functions http_uri:encode and http_uri:decode.
  * The new module peer supersedes the slave module. The slave
    module is now deprecated and will be removed in OTP 27.
  * global will now by default prevent overlapping partitions due
    to network issues. This is done by actively disconnecting
    from nodes that reports that they have lost connections to
    other nodes. This will cause fully connected partitions to
    form instead of leaving the network in a state with
    overlapping partitions.
  * It is possible to turn off the new behavior by setting the
    the kernel configuration parameter
    prevent_overlapping_partitions to false. Doing this will
    retain the same behavior as in OTP 24 and earlier.
  * The format_status/2 callback for gen_server, gen_statem and
    gen_event has been deprecated in favor of the new
    format_status/1 callback.
  * The new callback adds the possibility to limit and change
    many more things than the just the state.
  * The timer module has been modernized and made more efficient,
    which makes the timer server less susceptible to being
    overloaded. The timer:sleep/1 function now accepts an
    arbitrarily large integer.
  - compiler:
  * The maybe ... end construction as proposed in EEP-49 has been
    implemented. It can simplify complex code where otherwise
    deeply nested cases would have to be used.
  * To enable maybe, give the option {enable_feature,maybe_expr}
    to the compiler. The exact option to use will change in a
    coming release candidate and then it will also be possible to
    use from inside the module being compiled.
  * When a record matching or record update fails, a {badrecord,
    ExpectedRecordTag} exception used to be raised. In this
    release, the exception has been changed to {badrecord,
    ActualValue}, where ActualValue is the value that was found
    instead of the expected record.
  * Add compile attribute -nifs() to empower compiler and loader
    with information about which functions may be overridden as
    NIFs by erlang:load_nif/2.
  * Improved and more detailed error messages when binary
    construction with the binary syntax fails. This applies both
    for error messages in the shell and for
    erl_error:format_exception/3,4.
  * Change format of feature options and directives for better
    consistency. Options to erlc and the -compile(..) directive
    now has the format {feature, feature-name, enable | disable}.
    The -feature(..) now has the format -feature(feature-name,
    enable | disable).
  - crypto:
  * Add crypto:hash_equals/2 which is a constant time comparision
    of hashvalues.
  - ssl:
  * Introducing a new (still experimental) option
    {certs_keys,[cert_key_conf()]}. With this a list of a
    certificates with their associated key may be used to
    authenticate the client or the server. The certificate key
    pair that is considered best and matches negotiated
    parameters for the connection will be selected.
  - public_key:
  * Functions for retrieving OS provided CA-certs added.
  - dialyzer:
  * Optimize operations in the erl_types module. Parallelize the
    Dialyzer pass remote.
  * Added the missing_return and extra_return options to raise
    warnings when specifications differ from inferred types.
    These are similar to, but not quite as verbose as overspecs
    and underspecs.
  * Dialyzer now better understands the types for min/2, max/2,
    and erlang:raise/3. Because of that, Dialyzer can potentially
    generate new warnings. In particular, functions that use
    erlang:raise/3 could now need a spec with a no_return()
    return type to avoid an unwanted warning.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1656849600">- Changes for 25.0.2:
  * ssl: Improved handling of unexpected messages during the
    handshake, taking the right action for unexpected messages.
  * erts: On computers with the ARM64 (AArch64) architecture (such
    as Apple Silicon Macs) a rem expression followed by a div
    expression with the same operands could evaluate to the wrong
    result if the result of the rem expression was unused.
- Changes for 25.0.1:
  * ssl: When a TLS-1.3 enabled client tried to talk to a TLS-1.2
    server that coalesces TLS-1.2 handshake message over one TLS
    record, the connection could fail due to some message being
    handled in the wrong state, this has been fixed.
  * ssl: Correctly handles supported protocol version change from
    default to something else by sni_fun supplied to
    ssl:handshake/[2,3] together with a TCP-socket (so called
    upgrade).
  * ssl: Also, TLS-1.3 should respond with a protocol version alert
    if previous versions, that are supported but not configured,
    are attempted.
  * kernel: The DNS resolver inet_res has been fixed to ignore
    trailing dot difference in the request domain between the sent
    request and the received response, when validating a response.
  * kernel: A bug in inet_res has been fixed where a missing
    internal {ok,_} wrapper caused inet_res:resolve/* to return a
    calculated host name instead of an `{ok,Msg} tuple, when
    resolving an IP address or a host name that is an IP address
    string.
  * kernel: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * kernel: Added the missing mandatory address/0 callback in the
    gen_tcp_dist example.
  * erts: A spawn_reply signal from a remote node could be delayed
    and be delivered after other signals from the newly spawned
    process. When this bug triggered, the connection to the node
    where the process was spawned sometimes could be taken down due
    to the bug. The following error message would then be logged if
    this happened: Missing 'spawn_reply' signal from the node
    &lt;RemoteNode&gt; detected by &lt;Pid&gt; on the node &lt;LocalNode&gt;. The
    node &lt;RemoteNode&gt; probably suffers from the bug with ticket id
    OTP-17737. This bug only affected processes which had enabled
    off_heap message_queue_data and parallel reception of signals
    had been automatically enabled. This bug was introduced in OTP
    25.0, ERTS version 13.0.
  * erts: Fixed type spec of erlang:system_info(dist_ctrl).
  * erts: The zlib built in to the runtime system has been updated
    to version 1.2.12. (Note that on most platforms, the platform's
    own zlib is used.)
  * erts: The erlang:is_alive() BIF could return true before
    configured distribution service was available. This bug was
    introduced in OTP 25.0 ERTS version 13.0. The
    erlang:monitor_node() and erlang:monitor() BIFs could
    erroneously fail even though configured distribution service
    was available. This occurred if these BIFs were called after
    the distribution had been started using dynamic node name
    assignment but before the name had been assigned.
  * crypto: Note in the documentation that MODP (rfc3526) groups
    and OpenSSL 3.0 can give an error if a call to
    crypto:generate_key/2 specifies a key length, and that length
    is to small.
  * crypto: The cmac now uses only the 3.0 API
  * crypto: Documentation is now updated with which OpenSSL
    cryptolib versions that OTP currently is tested.
  * dialyzer: Fixed the documentation for the missing_return and
    extra_return options.
  * mnesia: Fixed add_table_copy which could leave a table lock if
    the receiving node went down during the operation.
  * ssh: Binaries can be limited in logs with the parameter
    max_log_item_len. The default value is 500 bytes.
  * stdlib: In the initial release of Erlang/OTP 25, the expression
    bound to the _ pseudo-field in a record initialization would
    always be evaluated once, even if all other fields in the
    record were explicitly initialized. That would break the use
    case of binding the expression error(...) to _ in order to get
    an exception if not all fields were initialized. The behavior
    of binding to _ has been reverted to the pre-OTP 25 behavior,
    that is, to not evaluate the expression if all fields have been
    bound to explicit values.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1660046400">- Changes for 25.0.3:
  * erts: Distributed exit signals could be lost under the
    following conditions:
  * erts: A race could cause process_info(Pid, message_queue_len)
    on other processes to return invalid results.
  * erts: Fixed reduction counting for handling process system
    tasks.
  * erts: Priority elevation of terminating processes did not work
    which could cause execution of such processes to be delayed.
  * erts: An unlink operation made by a process that terminated
    before the unlink operation completed, i.e., before it had
    received an unlink-ack signal from the linked process, caused
    an exit signal to erroneously be sent from the terminating
    process to the process being unlinked. This exit signal would
    most often be ignored by the receiver, but if the receiver of
    the exit signal concurrently set up a new link, it could
    receive the exit signal with the actual exit reason of the
    terminating process instead of a noproc exit reason. It is
    however very hard to detect that this has happened and has no
    obvious negative consequences, so it should be considered
    harmless. A distributed unlink-ack signal received by a
    terminating process was also not properly removed which could
    cause a minor memory leak.
  * ssl: The link to crypto:engine_load refered the function with
    wrong arity.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661601600">- Changes for 25.0.4:
  * kernel: A call to net_kernel:setopts(new, Opts) at the same
    time as a connection was being set up could cause a deadlock
    between the net_kernel process and the process setting up the
    connection.
  * erts: The monitor/3 BIF did not apply options to the created
    monitor if the target process or port did not exist. That is,
    the corresponding down message would get a `DOWN` tag even if a
    custom tag had been set, and the returned reference was not an
    alias even if the alias option had been passed.
  * erts: The erlang:monotonic_time/1, erlang:system_time/1,
    erlang:time_offset/1, and os:system_time/1 BIFs erroneously
    failed when passed the argument native.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1665662400">- Changes for 25.1.1:
  * dialyzer: Dialyzer could crash when analyzing Elixir code that
    used intricate macros.
  * dialyzer: The --input_list_file option has been added.
  * ssl: Fixes handling of symlinks in cacertfile option.
  * eunit: With this change, eunit exact_execution option works
    with application primitive.
  * stdlib: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
  * asn1: For the per and uper ASN.1 encoding rules, encoding and
    decoding the SEQUENCE OF and SET OF constructs with 16384 items
    or more is now supported.
  * erts: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * erts: Notifications about available distribution data sent to
    distribution controller processes could be lost. Distribution
    controller processes can be used when implementing an
    alternative distribution carrier. The default distribution over
    tcp was not effected and the bug was also not present on
    x86/x86_64 platforms.
  * kernel: Listen sockets created with the socket module, leaked
    (erlang-) monitors.
  * kernel: peer nodes failed to halt when the process supervising
    the control connection crashed. When an alternative control
    connection was used, this supervision process also quite
    frequently crashed when the peer node was stopped by the node
    that started it which caused the peer node to linger without
    ever halting.
- Changes for 25.1:
  * dialyzer: Two bugs have been fixed in Dialyzer's checking of
    behaviors: When a mandatory callback function is present but
    not exported, Dialyzer would not complain about a missing
    callback. When an optional callback function was not exported
    and had incompatible arguments and/or the return values were
    incompatible, Dialyzer would complain. This has been changed to
    suppress the warning, because the function might not be
    intended to be a callback function, for instance if a release
    added a new optional callback function (such as format_status/1
    for the gen_server behaviour added in OTP 25).
  * dialyzer: The no_extra_return and no_missing_return warnings
    can now be suppressed through -dialyzer directives in source
    code.
  * jinterface: Fix javadoc build error by adding option -encoding
    UTF-8.
  * diameter: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * crypto: Fix configure with --with-ssl and --disable-dynamic-
    ssl-lib on Windows.
  * crypto: Remove all references correctly in the garbage
    collection if an engine handle was not explicit unloaded.
  * crypto: Changed the behaviour of the engine load/unload
    functions The engine load/unload functions have got changed
    semantics to get a more consistent behaviour and work correct
    when variables are garbage collected. The load functions now
    don't register the methods for the engine to replace. That will
    now be handled with the new functions
    engine_register/engine_unregister if needed. Some functions are
    removed from the documentation and therefor the API, but they
    are left in the code for compatibility. *** POTENTIAL
    INCOMPATIBILITY ***
  * crypto: Fixed a naming bug for AES-CFB and Blowfish-CFB/OFB
    when linked with OpenSSL 3.0 cryptolib.
  * crypto: Sign/verify does now behave as in OTP-24 and earlier
    for eddsa.
  * crypto: Pass elliptic curve names from crypto.erl to crypto's
    nif.
  * crypto: The configure option --disable-deprecated-warnings is
    removed. It was used for some releases when the support for
    OpenSSL 3.0 was not completed. It is not needed in OTP 25.
  * crypto: Crypto is now considered to be usable with the OpenSSL
    3.0 cryptolib for production code. ENGINE and FIPS are not yet
    fully functional.
  * crypto: Do not exit if the legacy provider is missing in
    libcrypto 3.0.
  * ssl: Reject unexpected application data in all relevant places
    for all TLS versions. Also, handle TLS-1.3 middlebox
    compatibility with more care. This will make malicious
    connections fail early and further, mitigate possible DoS
    attacks, that would be caught by the handshake timeout. Thanks
    to Aina Toky Rasoamanana and Olivier Levillain from Télécom
    SudParis for alerting us of the issues in our implementation.
  * ssl: With this change, value of cacertfile option will be
    adjusted before loading certs from the file. Adjustments
    include converting relative paths to absolute and converting
    symlinks to actual file path. Thanks to Marcus Johansson
  * ssl: In TLS-1.3, if chain certs are missing (so server auth
    domain adherence can not be determined) send peer cert and hope
    the server is able to recreate a chain in its auth domain.
  * ssl: Make sure periodical refresh of CA certificate files
    repopulates cache properly.
  * ssl: Correct internal CRL cache functions to use internal
    format consistently.
  * ssl: Incorrect handling of client middlebox negotiation for
    TLS-1.3 could result in that a TLS-1.3 server would not use
    middlebox mode although the client was expecting it too and
    failing the negotiation with unexpected message.
  * ssl: If the "User" process, the process starting the TLS
    connection, gets killed in the middle of spawning the dynamic
    connection tree make sure we do not leave any processes behind.
  * ssl: A vulnerability has been discovered and corrected. It is
    registered as CVE-2022-37026 "Client Authentication Bypass".
    Corrections have been released on the supported tracks with
    patches 23.3.4.15, 24.3.4.2, and 25.0.2. The vulnerability
    might also exist in older OTP versions. We recommend that
    impacted users upgrade to one of these versions or later on the
    respective tracks. OTP 25.1 would be an even better choice.
    Impacted are those who are running an ssl/tls/dtls server using
    the ssl application either directly or indirectly via other
    applications. For example via inets (httpd), cowboy, etc. Note
    that the vulnerability only affects servers that request client
    certification, that is sets the option {verify, verify_peer}.
    (bsc#1205318)
  * eunit: With this change, Eunit can optionally not try to
    execute related module with "_tests" suffix. This might be used
    for avoiding duplicated executions when source and test modules
    are located in the same folder.
  * erl_docgen: Update DTD to allow XML tag em under pre.
  * inets: Add httpc:ssl_verify_host_options/1 to help setting
    default ssl options for the https client.
  * inets: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * inets: Remove documentation of no longer supported callback.
  * stdlib: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * stdlib: Fix the public_key:ssh* functions to be listed under
    the correct release in the Removed Functionality User's Guide.
  * stdlib: The type spec for format_status/1 in gen_statem,
    gen_server and gen_event has been corrected to state that the
    return value is of the same type as the argument (instead of
    the same value as the argument).
  * stdlib: If the timer server child spec was already present in
    kernel_sup but it was not started, the timer server would fail
    to start with an {error, already_present} error instead of
    restarting the server.
  * stdlib: When changing callback module in gen_statem the
    state_enter calls flag from the old module was used in for the
    first event in the new module, which could confuse the new
    module and cause malfunction. This bug has been corrected. With
    this change some sys debug message formats have been modified,
    which can be a problem for debug code relying on the format.
  * ** POTENTIAL INCOMPATIBILITY ***
  * stdlib: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * stdlib: The rfc339_to_system_time/1,2 functions now allows the
    minutes part to be omitted from the time zone.
  * stdlib: The receive statement in gen_event has been optimized
    to not use selective receive (which was never needed, and could
    cause severe performance degradation under heavy load).
  * stdlib: Add new API function erl_features:configurable/0
  * parsetools: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * public_key: Support more Linux distributions in cacerts_load/0.
  * public_key: Correct asn1 typenames available in type
    pki_asn1_type()
  * public_key: Sign/verify does now behave as in OTP-24 and
    earlier for eddsa.
  * snmp: Improved the get-bulk response max size calculation. Its
    now possible to configure 'empty pdu size', see appendix c for
    more info.
  * snmp: Fix various example dialyzer issues
  * ssh: Handling rare race condition at channel close.
  * ssh: New ssh option no_auth_needed to skip the ssh
    authentication. Use with caution!
  * ssh: This change fixes dialyzer warnings generated for
    inets/httpd examples (includes needed adjustment of spec for
    ssh_sftp module).
  * ssh: The new function ssh:daemon_replace_options/2 makes it
    possible to change the Options in a running SSH server.
    Established connections are not affected, only those created
    after the call to this new function.
  * ssh: Add a timeout as option max_initial_idle_time. It closes a
    connection that does not allocate a channel within the timeout
    time. For more information about timeouts, see the Timeouts
    section in the User's Guide Hardening chapter.
  * observer: Fixed units in gui.
  * xmerl: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * asn1: There is a new configure option, --enable-deterministic-
    build, which will apply the deterministic compiler option when
    building Erlang/OTP. The deterministic option has been improved
    to eliminate more sources of non-determinism in several
    applications.
  * erts: Fixed inconsistency bugs in global due to nodeup/nodedown
    messages not being delivered before/after traffic over
    connections. Also fixed various other inconsistency bugs and
    deadlocks in both global_group and global. As building blocks
    for these fixes, a new BIF erlang:nodes/2 has been introduced
    and net_kernel:monitor_nodes/2 has been extended. The -hidden
    and -connect_all command line arguments did not work if
    multiple instances were present on the command line which has
    been fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * erts: Fixed IPv6 multicast_if and membership socket options.
  * erts: Accept funs (NEW_FUN_EXT) with incorrectly encoded size
    field. This is a workaround for a bug (OTP-18104) existing in
    OTP 23 and 24 that could cause incorrect size fields in certain
    cases. The emulator does not use the decoded size field, but
    erl_interface still does and is not helped by this workaround.
  * erts: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * erts: Fix faulty distribution encoding of terms with either The
    symptom could be failed decoding on the receiving side leading
    to aborted connection. Fix OTP-18093 is a workaround for theses
    bugs that makes the VM accepts such faulty encoded funs. The
    first encoding bug toward pending connection exists only in OTP
    23 and 24, but the second one exists also on OTP 25.
  * erts: Fixed emulator crash that could happen during crashdump
    generation of ETS tables with options ordered_set and
    {write_concurrency,true}.
  * erts: Retrieval of monotonic and system clock resolution on
    MacOS could cause a crash and/or erroneous results.
  * erts: Fix bug where the max allowed size of erl +hmax was lower
    than what was allowed by process_flag.
  * erts: On computers with ARM64 (AArch64) processors, the JIT
    could generate incorrect code when more than 4095 bits were
    skipped at the tail end of a binary match.
  * erts: In rare circumstances, an is_binary/1 guard test could
    succeed when given a large integer.
  * erts: Fix bug causing ets:info (and sometimes ets:whereis) to
    return 'undefined' for an existing table if a concurrent
    process were doing ets:insert with a long list on the same
    table.
  * erts: Fix writing and reading of more than 2 GB in a single
    read/write operation on macOS. Before this fix attempting to
    read/write more than 2GB would result in {error,einval}.
  * erts: Fix bug sometimes causing emulator crash at node shutdown
    when there are pending connections. Only seen when running duel
    distribution protocols, inet_drv and inet_tls_dist.
  * erts: Yield when adjusting large process message queues due to
    The message queue adjustment work will now be interleaved with
    all other types of work that processes have to do, even other
    message queue adjustment work.
  * erts: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * erts: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * erts: New documentation chapter "Debugging NIFs and Port
    Drivers" under Interoperability Tutorial.
  * erts: Add new API function erl_features:configurable/0
  * kernel: Fixed inconsistency bugs in global due to
    nodeup/nodedown messages not being delivered before/after
    traffic over connections. Also fixed various other
    inconsistency bugs and deadlocks in both global_group and
    global. As building blocks for these fixes, a new BIF
    erlang:nodes/2 has been introduced and
    net_kernel:monitor_nodes/2 has been extended. The -hidden and
  - connect_all command line arguments did not work if multiple
    instances were present on the command line which has been
    fixed. The new kernel parameter connect_all has also been
    introduced in order to replace the -connect_all command line
    argument.
  * kernel: Fixed IPv6 multicast_if and membership socket options.
  * kernel: Fixed issue with inet:getifaddrs hanging on pure IPv6
    Windows
  * kernel: The type specifications for inet:getopts/2 and
    inet:setopts/2 have been corrected regarding SCTP options.
  * kernel: The type specifications for inet:parse_* have been
    tightened.
  * kernel: Fix gen_tcp:connect/3 spec to include the inet_backend
    option.
  * kernel: Fix bug where using a binary as the format when calling
    logger:log(Level, Format, Args) (or any other logging function)
    would cause a crash or incorrect logging.
  * kernel: Add rudimentary debug feature (option) for the inet-
    driver based sockets, such as gen_tcp and gen_udp.
  * kernel: Introduced the hidden and dist_listen options to
    net_kernel:start/2. Also documented the -dist_listen command
    line argument which was erroneously documented as a kernel
    parameter and not as a command line argument.
  * kernel: Scope and group monitoring have been introduced in pg.
    For more information see the documentation of
    pg:monitor_scope(), pg:monitor(), and pg:demonitor().
  * kernel: A new function global:disconnect/0 has been introduced
    with which one can cleanly disconnect a node from all other
    nodes in a cluster of global nodes.
  * compiler: The compiler will now forbid using the empty atom ''
    as module name. Also forbidden are modules names containing
    control characters, and module names containing only spaces and
    soft hyphens.
  * compiler: The bin_opt_info and recv_opt_info options would
    cause the compiler to crash when attempting to compile
    generated code without location information.
  * compiler: In rare circumstances involving floating point
    operations, the compiler could terminate with an internal
    consistency check failure.
  * compiler: In rare circumstances when doing arithmetic
    instructions on non-numbers, the compiler could crash.
  * compiler: In rare circumstances, complex boolean expressions in
    nested cases could cause the compiler to crash.
  * compiler: Expression similar to #{assoc:=V} = #key=&gt;self()}, V
    would return the empty map instead of raising an exception.
  * compiler: Eliminated a crash in the beam_ssa_bool pass of the
    compiler when compiling a complex guard expression.
  * compiler: In rare circumstances, the compiler could crash with
    an internal consistency check failure.
  * compiler: When compiling with the option inline_list_funcs, the
    compiler could produce a nonsensical warning.
  * compiler: When given the no_ssa_opt option, the compiler could
    terminate with an internal consistency failure diagnostic when
    compiling map matching.
  * compiler: Made warnings for existing atoms being keywords in
    experimental features more precise, by not warning about quoted
    atoms.
  * compiler: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * megaco: Fixed various dialyzer related issues in the examples
    and the application proper.
  * megaco: There is a new configure option, --enable-
    deterministic-build, which will apply the deterministic
    compiler option when building Erlang/OTP. The deterministic
    option has been improved to eliminate more sources of non-
    determinism in several applications.
  * common_test: Fix cth_surefire to handle when a suite is not
    compiled with debug_info. This bug has been present since
    Erlang/OTP 25.0.
  * common_test: Common Test now preserves stack traces for throws.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1669291200">- Changes for 25.1.2:
  * mnesia: Don't fill the logs if mnesia can't connect to all
    nodes, due to partitioned network.
  * erts: Add abandon carrier free utilization limit (+Muacful)
    option to erts_alloc. This option allows the user to mark
    unused segments in a memory carrier as re-useable by the OS if
    needed. This functionality was a non-configurable default
    before Erlang/OTP 25, but removed due to performance issues.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1671364800">- Changes for 25.2:
  * erts: Fix perf/gdb JIT symbols to not contain CodeInfoPrologue
    for the JIT internal module erts_beamasm.
  * erts: Fixed minor memory leaks.
  * erts: Fix bugs in ets:insert and ets:insert_new when called
    with a list of tuples to insert while a concurrent process
    either deletes or renames the table. The table deletion could
    be done with ets:delete/1 or be caused by termination of the
    table owning process. Symptoms are either VM crash or strange
    incorrect behavior from the insert operation. The risk of
    triggering the bugs increases with the length of the list of
    tuple to insert. Bugs exist since OTP 23.0.
  * erts: Boost execution of scheduled thread progress jobs. This
    to prevent memory exhaustion in extremely rapid
    allocation/deallocation scenarios, such as repeated ETS table
    creations/deletions.
  * erts: Fix segv crash during crash dumping an ETS table doing
    ets:delete_all_objects.
  * erts: Spec for function net:if_names/0 incorrect
  * erts: Fix bug in binary_to_term decoding a binary term 2Gbyte
    or larger.
  * erts: Documentation of erlang:module_loaded/1 has been
    adjusted:
  * erts: Fix list_to_atom/1 for negative code points. Could either
    return with a positive code point or fail with an incorrect
    exception.
  * erts: Fix rare bug causing VM crash when sending to a pid of a
    spawning process returned from erlang:processes/0. Only seen
    when provoked by system process literal_area_collector,
    triggered by a module purge operation, on a VM started with
    +Meamin (no customized allocators).
  * erts: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * erts: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * erts: Fix bug in binary_to_term decoding a list of length 1G or
    longer.
  * erts: Fix bug in binary_to_term (and distributed receive) when
    decoding a large map (&gt;32 keys) with unsorted small maps (&lt;=
    32) as keys of the large map. This was only a problem if the
    term was encoded by erl_interface, jinterface or otherwise, as
    the VM itself always encodes small maps with sorted keys. The
    "binary_to_term" would appear as successful but the created
    large map was internally inconsistent. The smaller key-maps
    could not be found with maps:get and friends. Other operations
    such as map compare and merge could probably also give
    incorrect results.
  * erts: Fix Windows bug in open_port({spawn, Command}, ..) when
    Command is found via the OS search PATH and that directory path
    contains white spaces. The port program would start but the
    command line arguments to it could be incorrect.
  * ftp: fix unexpected result ok when calling ftp:nlist repeatedly
  * inets: This change allows body requests to httpc:request/5 be
    an iolist()
  * inets: addition of type specs in httpc.erl
  * inets: httpc: Add support for HTTP 308 status code
  * dialyzer: Dialyzer would crash when attempting to analyze a bit
    syntax segment size having an literal non-integer size such as
    [].
  * dialyzer: Dialyzer could crash when trying to analyze a
    convoluted nested expression involving funs,
  * kernel: Fixed shutdown crash in gen_tcp socket backend, when
    the other end closed the socket.
  * kernel: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * kernel: Fix os:cmd to not translate all exceptions thrown to
    badarg. For example emfile from erlang:open_port was translated
    to badarg. This bug has existed since Erlang/OTP 24.
  * kernel: Spec for function net:if_names/0 incorrect
  * kernel: Missing ctrl option name transation for TOS and TTL (on
    FreeBSD) when using gen_udp with the 'socket' inet_backend.
  * kernel: gen_udp:open/2 with option(s) add_membership or
    drop_membership would drop earlier options.
  * kernel: The inet:setopts/2 {reuseaddr, true} option will now be
    ignored on Windows unless the socket is an UDP socket. For more
    information see the documentation of the reuseaddr option part
    of the documentation of inet:setopts/2. Prior to OTP 25 the
    {reuseaddr, true} option was ignored for all sockets on
    Windows, but as of OTP 25.0 this was changed so that it was not
    ignored for any sockets. *** POTENTIAL INCOMPATIBILITY ***
  * kernel: The distribution socket option handling in
    inet_tcp_dist has been cleaned up to clarify which were
    mandatory and which just had default values.
  * kernel: Improve warning message format for gen_tcp_socket.
  * snmp: Explicitly close the socket(s) when terminating
    (default-) net-if process.
  * stdlib: erl_tar can now read gzip-compressed tar files that are
    padded. There is a new option compressed_one for file:open/2
    that will read a single member from a gzip file,
  * stdlib: A concurrent call to ets:rename could cause
    ets:delete_all_objects to fail halfway through with badarg.
  * stdlib: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * stdlib: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * stdlib: unicode:characters_to_binary() could build
    unnecessarily large call stack.
  * stdlib: Improve error message for ets:new/2 name clash. Say
    "name already exists" instead of less specific "invalid
    options".
  * mnesia: Fixed crash which could happen during startup if too
    many decisions where sent from remote nodes.
  * os_mon: The disk_space_check_interval configuration parameter
    of disksup can now be set to values smaller than a minute.
  * ssh: graceful shutdown of ssh_conection_handler when connection
    is closed by peer
  * common_test: Fix starting of peer nodes on old releases when
    the compile server was active and the current Erlang
    installation contained non-latin1 characters in its path.
  * public_key: Disregard LDAP URIs when HTTP URIs are expected.
  * ssl: With this change, tls_sender process is hibernated after
    sufficient inactivity.
  * ssl: Correct handling of legacy schemes so that ECDSA certs
    using sha1 may be used for some TLS-1.3 configurations.
  * ssl: With this change, tls_sender does not cause logger crash
    upon key update.
  * ssl: Enhance warning message
  * ssl: Provide server option to make certificate_authorities
    extension in the TLS-1.3 servers certificate request optional.
    This will allow clients to send incomplete chains that may be
    reconstructable and thereby verifiable by the server, but that
    would not adhere to the certificate_authorities extension.
  * ssl: If the verify_fun handles four arguments the DER cert will
    be supplied as one of the arguments.
  * megaco: A very minor improvement to the measurement tool.
  * observer: A WX event race could causes a crash in when handling
    socket or port info.
  * observer: Improve the nodes menu to include more nodes.
  * compiler: Line number in compiler messages would be truncated
    to 4 digits for line numbers greater than 9999.
  * compiler: In rare circumstance, matching a binary as part of a
    receive clause could cause the compiler to terminate because of
    an internal consistency check failure.
  * compiler: Compiling a function with complex bit syntax matching
    such as f(&lt;&lt;X:0, _:X&gt;&gt;, &lt;&lt;Y:0, _:Y&gt;&gt;) -&gt; ok. could crash the
    compiler.
  * compiler: It is not allowed to call functions from guards. The
    compiler failed to reject a call in a guard when done by
    constructing a record with a default initialization expression
    that called a function.
  * compiler: The compiler could crash when using a record with
    complex field initialization expression as a filter in a list
    comprehension.
  * wx: Added environment variable WX_MACOS_NON_GUI_APP to allow
    user to override OSXIsGUIApplication behavior.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1679745600">- Changes for 25.3:
  * reltool: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a bug that would cause analysis to crash.
  * stdlib: Fixed a crash when formatting stack traces for error
    reports.
  * stdlib: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * stdlib: Removal of non-necessary undefined types added to the
    state's supervisor record.
  * compiler: Fixed a bug that would cause the compiler to hang.
  * compiler: Fixed a crash when compiling code that contained
    maybe expressions.
  * compiler: Constructing a binary with an explicit size of all
    for a binary segment would crash the compiler.
  * compiler: The compiler would generate incorrect code for the
    following type of expression: Pattern = BoundVar1 = . . . =
    BoundVarN = Expression An exception should be raised if any of
    the bound variables have different values than Expression. The
    compiler would generate code that would cause the bound
    variables to be bound to the value of Expressionwhether the
    value matched or not.
  * xmerl: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * megaco: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * debugger: Fixed a bug that would cause analysis to crash.
  * erts: Fixed a bug on Windows where file:read_file_info/1 would
    fail for files with corrupt metadata.
  * erts: Fix process_info(_, binary) to again include "writable
    binaries" which were lost in OTP-25.0. Writable binaries are an
    optimization used when binaries are appended upon in a loop.
  * erts: Fix rare race when receiving fragmented messages on a
    terminating connection. Could potentially cause memory leaks as
    well as double free crashes. Bug exists since OTP 22.0.
  * erts: Fixed bug that could maybe cause problems when a file
    descriptor number is closed by a linked in driver and then
    opened (reused) and passed to enif_select by a NIF. No actual
    symptoms seen, only failed internal assertions in debug build.
  * erts: The runtime system could crash when tracing a process
    executing on a dirty scheduler.
  * erts: In the binary syntax, attempting to match out integers
    with size exceeding 2 GiB could crash the runtime system.
  * erts: Fixed edge case in floating-point negation where A = 0.0,
    B = -A did not produce B = -0.0 on x86_64 JIT.
  * erts: Fixed an issue in the JIT that could crash the emulator
    on some platforms.
  * erts: Added meta data to the windows installer.
  * erts: Fixed ETS insertion order into bag and duplicate_bag of
    tuples with identical keys when passed in a list to
    ets:insert/2. The insert order has been head-to-tail but was
    accidentally changed in OTP 23.0. For bag it was reverted
    (tail-to-head), while for duplicate_bag it was sometimes
    reverted depending on the length of the list and number of
    "reductions" left for the calling process. This fix changes the
    insert order of ets:insert/2 back to always be head-to-tail of
    the list argument.
  * erts: With the JIT for AArch64 (AMD64), calling bxor in with
    non-integer arguments in a guard would crash the runtime
    system.
  * erts: Fix bug regarding process flag max_heap_size. Could cause
    strange behavior when a process was killed due to exceeding the
    limit.
  * erts: Fixed binary comprehensions to be similar to other
    creation of binary data with respect to its contribution of
    triggering garbage collection.
  * erts: In rare circumstances, when a process exceeded its
    allowed heap size set by option max_heap_size, it would not be
    killed as it should be, but instead enter a kind of zombie
    state it would never get out of.
  * erts: Instead of crashing, the list_to_integer/1 and
    list_to_integer/2 BIFs now raise the system_limit exception for
    overlong lists that can't be converted to integers. Similarly,
    the string:to_integer/1 BIF now returns {error,system_limit}
    for overlong lists.
  * erts: Active process aliases of a process at its termination
    leaked memory.
  * erts: Support for fully asynchronous distributed signaling
    where send operations never block. This functionality is by
    default disabled and can be enabled per process. For more
    information see the documentation of process_flag(async_dist,
    Bool).
  * erts: Added the +JPperf no_fp option to explicitly disable
    Erlang frame pointers otherwise added when using the +JPperf
    map option.
  * erl_interface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * erl_interface: The ei API for decoding/encoding terms is not
    fully 64-bit compatible since terms that have a representation
    on the external term format larger than 2 GB cannot be handled.
  * syntax_tools: erl_syntax_lib:annotate_bindings/1,2 will now
    properly annotate named functions and their arguments.
  * kernel: Fixed a bug on Windows where file:read_file_info/1
    would fail for files with corrupt metadata.
  * kernel: Accept connection setup from OTP 23 and 24 nodes that
    are not using epmd.
  * public_key: As different solutions of verifying certificate
    revocation exists move the decode of 'CRLDistributionPoints' so
    that it will only be decode. When it is actually used in the
    verification process. This would enable interoperability with
    systems that use certificates with an invalid empty
    CRLDistributionPoints extension that they want to ignore and
    make verification by other means.
  * public_key: public_key:pkix_path_validation validates
    certificates expiring after 2050
  * public_key: Do not leave exit message in message queue after
    calling cacerts_load() on MacOS.
  * public_key: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ssl: Fixed that new dtls connections from the same client ip
    port combination works. If there is a process waiting for
    accept the new connection will connect to that, otherwise it
    will try to re-connect to the old server connection.
  * ssl: When shutting down a node that uses SSL distribution
    (-proto_dist inet_tls), a confusing error message about an
    unexpected process exit was printed. This particular message is
    no longer generated.
  * ssl: fixes the type spec for ssl:format_error/1
  * ssl: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * jinterface: Accept connection setup from OTP 23 and 24 nodes
    that are not using epmd.
  * os_mon: The port programs used by cpu_sup and memsup are now
    gracefully shut down when cpu_sup and memsup are shut down.
  * eunit: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * crypto: A user defined runtime library path configured using
  - -with-ssl-rpath=&lt;PATHS&gt; could fail to be enabled.
  * crypto: Ensure that configure fails if a user defined runtime
    library path has been passed by the user, but cannot set.
  * mnesia: Improved consistency for dirty writes when a table was
    added with add_table_copy/3. Fixed a problem with sticky write,
    which could lead to inconsistent data.
  * mnesia: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * common_test: Renamed undocumented macro CT_PEER/3 to
    CT_PEER_REL/3.
  * ssh: With this change, PKCS8 formatted private key file is
    properly decoded and SSH daemon with such key can be started.
  * ssh: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * inets: With this change, handling of URI to a folder, with
    missing trailing / and a query component present is fixed.
  * inets: Adds more type information to the inets app, thus
    improving the errors that static analysis tools can detect. The
    addition of type information to records and the updates to
    function heads help static analysis tools to understand that
    some values in the records cannot be 'undefined', thus making
    static tools to type check correctly more modules in the inets
    app
  * inets: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * snmp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * ftp: Replace size/1 with either tuple_size/1 or byte_size/1 The
    size/1 BIF is not optimized by the JIT, and its use can result
    in worse types for Dialyzer. When one knows that the value
    being tested must be a tuple, tuple_size/1 should always be
    preferred. When one knows that the value being tested must be a
    binary, byte_size/1 should be preferred. However, byte_size/1
    also accepts a bitstring (rounding up size to a whole number of
    bytes), so one must make sure that the call to byte_size/ is
    preceded by a call to is_binary/1 to ensure that bitstrings are
    rejected. Note that the compiler removes redundant calls to
    is_binary/1, so if one is not sure whether previous code had
    made sure that the argument is a binary, it does not harm to
    add an is_binary/1 test immediately before the call to
    byte_size/1.
  * dialyzer: Fixed a bug that would cause analysis to crash.
  * dialyzer: Replace size/1 with either tuple_size/1 or
    byte_size/1 The size/1 BIF is not optimized by the JIT, and its
    use can result in worse types for Dialyzer. When one knows that
    the value being tested must be a tuple, tuple_size/1 should
    always be preferred. When one knows that the value being tested
    must be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
  * tftp: Replace size/1 with either tuple_size/1 or byte_size/1
    The size/1 BIF is not optimized by the JIT, and its use can
    result in worse types for Dialyzer. When one knows that the
    value being tested must be a tuple, tuple_size/1 should always
    be preferred. When one knows that the value being tested must
    be a binary, byte_size/1 should be preferred. However,
    byte_size/1 also accepts a bitstring (rounding up size to a
    whole number of bytes), so one must make sure that the call to
    byte_size/ is preceded by a call to is_binary/1 to ensure that
    bitstrings are rejected. Note that the compiler removes
    redundant calls to is_binary/1, so if one is not sure whether
    previous code had made sure that the argument is a binary, it
    does not harm to add an is_binary/1 test immediately before the
    call to byte_size/1.
- Changes for 25.2.3:
  * erts: Comparisons between small numbers and pids or ports would
    in some edge cases say that the number was greater than the pid
    or port, violating the term order.
  * erts: process_info(Pid, status) when Pid /= self() could return
    an erroneous result.
  * ssl: Maximize compatibility by ignoring change_cipher_spec
    during handshake even if middle_box_mode is not negotiated
    (mandated by client)
  * ssl: Move assert of middlebox message after an
    hello_retry_request to maximize interoperability. Does not
    changes semantics of the protocol only allows unexpected
    message delay from server.
  * ssh: With this change, ssh application does not crash when
    formatting some of info reports for unsuccessful connections.
  * ssh: With this change, ssh does not log extensively long
    messages.
  * inets: Ensure graceful shutdown
  * inets: Return type of the type specification for function
    httpc:cookie_header/{1,2,3} has been fixed from -spec
    cookie_header(url()) -&gt; [{ field(), value() }] | {error,
    Reason} to -spec cookie_header(url()) -&gt; { field(), value() } |
    {error, Reason}
- Changes for 25.2.2:
  * ftp: Fixes calls to ftp:nlist/2 returning {error, epath} when
    the file / folder exists
- Changes for 25.2.1:
  * compiler: Fixed a bug that could cause legal code to fail
    validation.
  * compiler: Eliminated a rare crash in the beam_types module.
  * erts: Fixed a bug in selective receive optimization that could
    crash 32-bit emulators.
  * erts: A race condition which was very rarely triggered could
    cause the signal queue of a process to become inconsistent
    causing the runtime system to crash.
  * kernel: The tcp connect option 'bind_to_device' could not be
    used with inet_backend = 'socket'. 'inet' requires value type
    binarry() and 'socket' requires value type 'string()'.
  * kernel: Minor issue processing options when calling
    gen_tcp:connect with a sockaddr() and inet_backend = socket.
  * common_test: Change timeout to infinity for gen_server calls in
    cth_log_redirect
  * inets: fixes a missing case of the type specification for
    httpd:info/2/3/4
  * snmp: Single threaded agent crash when vacm table not properly
    initiated.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1683460800">- Changes for 25.3.2:
  * compiler: Fixed type handling bugs that could cause an internal
    error in the compiler for correct code.
  * os_mon: Avoid error report from failing erlang:port_close at
    shutdown of cpu_sup and memsup. Bug exists since OTP 25.3
    (os_mon-2.8.1).
  * erts: If a runtime system which was starting the distribution
    already had existing pids, ports, or references referring to a
    node with the same nodename/creation pair that the runtime
    system was about to use, these already existing pids, ports, or
    references would not work as expected in various situations
    after the node had gone alive. This could only occur if the
    runtime system was communicated such pids, ports, or references
    prior to the distribution was started. That is, it was
    extremely unlikely to happen unless the distribution was
    started dynamically and was even then very unlikely to happen.
    The runtime system now checks for already existing pids, ports,
    and references with the same nodename/creation pair that it is
    about to use. If such are found another creation will be chosen
    in order to avoid these issues.
- Changes for 25.3.1:
  * snmp: Attempts to minimize the number of the error reports
    during a failed agent init.
  * compiler: When a map update such as #{}#{key:=value} that
    should fail with an exception was unused, the exception would
    be lost.
  * compiler: Fixed bug in the validator that made it reject valid
    code.
  * crypto: With this change, random errors are fixed for
    crypto:generate_key calls with OpenSSL 3.
  * erts: Fixed a bug in the loader that prevented certain modules
    compiled with no_ssa_opt from being loaded.
  * erts: Implementations of the call() driver callback that
    returned a faulty encoded result could cause a memory leak and
    could cause invalid data on the heap of the processes calling
    erlang:port_call/3.
  * erts: Fixed a memory corruption issue when upgrading code. The
    bug was introduced in OTP 25.3
  * erts: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * erts: Aliases created in combination with a monitor using the
    {alias, explicit_unalias} option stopped working from remote
    nodes when a 'DOWN' signal had been received due to the monitor
    or if the monitor was removed using the erlang:demonitor() BIF.
    This bug was introduced in OTP 24.3.4.10 and OTP 25.3.
  * erts: In rare circumstances, bit syntax matching of an invalid
    code point for a utf32 would crash the runtime system.
  * erts: Building the runtime system failed when native atomic
    support was missing. Note that execution on such systems have
    only been rudimentary tested.
  * erl_interface: Fixed configure tests for a few ARM-specific
    instructions, which prevented the emulator from being built on
    some platforms.
  * eldap: Added a new function eldap:info/1 that returns the
    socket and the transport protocol for the eldap connection.
  * inets: Correct timing related pipelining/keepalive queue bug,
    that could result in unexpected "socket_remotly_closed" errors.
  * inets: With this change, upon remote socket closure current
    request is added to a retried queue (either pipeline or
    keep_alive, but not both).
  * ssl: With this change, ssl:connection_information/2 returns
    correct keylog data after TLS1.3 key update.
  * ssl: Client signature algorithm list input order is now honored
    again , it was accidently reversed by a previous fix.
  * stdlib: The type specs in the erl_parse module has been updated
    to include the maybe construct and the ! operator.
  * wx: Improve debug prints from the nifs. Some minor fixes for
    wxWidgets-3.2. Fixed OpenGL debug functions.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687521600">- Changes for 25.3.2.2:
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
- Changes for 25.3.2.1:
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * erts: Fixed a crash during tracing on certain platforms that
    cannot use the machine stack for Erlang code (mainly OpenBSD
    and Linux with musl).
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: Further robustify implementation of large maps (&gt; 32
    keys). Keys that happen to have same internal 32-bit hash
    values are now put in collision nodes which are traversed with
    linear search. This removes the demand for the internal hash
    function when salted to eventually produce different hashes for
    all possible pairs of unequal terms.
  * stdlib: Static supervisors are very idle processes after they
    have started so they will now be hibernated after start to
    improve resource management.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608000">- Version 26.0:
  * Leex has been extended with optional column number support.
  * The family of enumeration functions in module lists has been
    extended with enumerate/3 that allows a step value to be
    supplied.
  * Update Unicode to version 15.0.0.
  * proc_lib:start*/* has become synchronous when the started
    process fails. This requires that a failing process use a new
    function proc_lib:init_fail/2,3, or exits, to indicate failure. All
    OTP behaviours have been fixed to do this.
  * auto-complete of variables, record names, record fields names,
    map keys, function parameter types and filenames.
  * Open external editor in the shell to edit the current
    expression.
  * defining records (with types), functions, specs and types in
    the shell.
  * Creation and matching of binaries with segments of fixed sizes
    have been optimized.
  * Creation and matching of UTF-8 segments have been optimized.
  * Appending to binaries has been optimized.
  * The compiler and JIT now generate better code for creation of
    small maps where all keys are literals known at compile time.
  * Thanks to the optimizations above the performance of the base64
    module has been significantly improved. For example, on an
    x86_64 system with the JIT both encode and decode are almost
    three times faster than in Erlang/OTP 25.
  * Map comprehensions as suggested in EEP 58 has now been
    implemented.
  * Some map operations have been optimized by changing the
    internal sort order of atom keys. This changes the
    (undocumented) order of how atom keys in small maps are printed
    and returned by maps:to_list/1 and maps:next/1. The new order
    is unpredictable and may change between different invocations
    of the Erlang VM.
  * Introducing the new function maps:iterator/2 for creating an
    interator that return the map elements in a deterministic
    order. There are also new modifiers k and K for the format
    string in io:format() to support printing map elements ordered.
  * Added the new built-in type dynamic() introduced in EEP 61, PR
    introducing EEP 61 improving support for gradual type checkers.
  * Dialyzer has a new incremental mode that be invoked by giving
    the --incremental option when running Dialyzer. This new
    incremental mode is likely to become the default in a future
    release.
  * Multi time warp mode is now enabled by default. This assumes
    that all code executing on the system is time warp safe.
  * Support for UTF-8 atoms and strings in the NIF interface
    including new functions enif_make_new_atom,
    enif_make_new_atom_len and enif_get_string_length.
  * The BIFs min/2 and max/2 are now allowed to be used in guards
    and match specs.
  * Improved the selective receive optimization, which can now be
    enabled for references returned from other functions. This
    greatly improves the performance of gen_server:send_request/3,
    gen_server:wait_response/2, and similar functions.
  * It is no longer necessary to enable a feature in the runtime
    system in order to load modules that are using it. It is
    sufficient to enable the feature in the compiler when compiling
    it.
  * inet:setopts/2 has got 3 new options: reuseport, reuseport_lb
    and exclusiveaddruse.
  * Fix so that -fno-omit-frame-pointer is applied to all of the
    Erlang VM when using the JIT so that tools, such as perf, can
    crawl the process stacks.
  * In the lists module, the zip family of functions now takes
    options to allow handling lists of different lengths.
  * Added the zip:zip_get_crc32/2 function to retrieve the CRC32
    checksum from an opened ZIP archive. gen_server optimized by
    caching callback functions
  * The modules Erlang DNS resolver inet_res and helper modules
    have been updated for RFC6891; to handle OPT RR with DNSSEC OK
    (DO) bit.
  * Introduced application:get_supervisor/1.
  * Cache OTP boot code paths, to limit how many folders that are
    being accessed during a module lookup. Can be disabled with
  - cache_boot_path false.
  * Support for Kernel TLS (kTLS), has been added to the SSL
    application, for TLS distribution (-proto_dist inet_tls), the
    SSL option {ktls, true}.
  * Improved error checking and handling of ssl options.
  * Mitigate memory usage from large certificate chains by lowering
    the maximum handshake size. This should not effect the common
    cases, if needed it can be configured to a higher value.
  * For security reasons the SHA1 and DSA algorithms are no longer
    among the default values.
  * Add encoding and decoding of use_srtp hello extension to
    facilitate for DTLS users to implement SRTP functionality.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1687608001">- Changes for 26.0.1:
  * erts: Build of the socket nif failed on Solaris 11.
  * erts: Fixed two reduction-counting bugs relating to binaries.
  * erts: Constructing a binary segment not aligned with a byte
    boundary, with a size not fitting in 31 bits, and with a value
    not fitting in a 64-bit word could crash the runtime system.
  * erts: When a binary construction failed because of bad size for
    a segment, the error information was not always correct.
  * erts: Fixed a crash when calling a fun that was defined in a
    module that had been upgraded.
  * kernel: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * kernel: Corrected the socket send function description (send
    with Timeout = nowait). The send function(s) could not return
    {ok, {RestData, SelectInfo}}
  * stdlib: The POSIX error exdev was sometimes incorrectly
    described as "cross domain link" in some error messages.
  * ssl: Make sure that selection of client certificates handle
    both TLS-1.3 and TLS-1.2 names correctly. Could cause valid
    client certificate to not be selected, and an empty client
    certificate message to be sent to server.
  * ssl: Improved ssl:format_error/1 to handle more error tuples.
  * ssl: Fixed hanging ssl:connect when ssl application is not
    started.
  * ssl: Correct handling of retransmission timers, current
    behavior could cause unwanted delays.
  * inets: Do not make the default ssl options by calling
    httpc:ssl_verify_host_options(true) if ssl options are supplied
    by the user.
  * xmerl: New options to xmerl_scan and xmerl_sax_parser so one
    can limit the behaviour of the parsers to avoid some XML
    security issues. xmerl_scan gets one new option:
    xmerl_sax_parser gets the following options: The old option
    skip_external_dtd is still valid and the same as
    {external_entities, none} and {fail_undeclared_ref, false} but
    just affects DTD's and not other external references.
  * compiler: Fixed a bug where a failing bsl expression in a guard
    threw an exception instead of causing the guard to fail.
  * compiler: Fixed a bug that would case the validator to reject
    legal code.
  * compiler: The compiler could re-order clauses matching binaries
    so that the incorrect clause would match. That could only
    happen for code that used the option {error_location,line} or
    for code without line or column number information (e.g.
    generated by a parse transform).
  * compiler: Complex guard expression using the or operator and
    guard BIFs that can fail could sometimes be miscompiled so that
    the guard would succeed even if a call to a guard BIF failed.
  * compiler: With optimizations disabled, a try/catch construct
    could return an incorrect value.
  * compiler: In rare circumstance, a combination of binary
    construction and binary_part/3 would cause the compiler to
    generate unsafe code that would crash the runtime system.
  * compiler: The compiler could be very slow when compiling guards
    with multiple guard tests separated with 'or' or ';'.
  * compiler: Complex guard expressions using 'or' and map updates
    could succeed even if the map update failed.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1698235200">- Changes for 26.1.2:
  * erts: If the external term format encoding of an argument list
    part of a distributed spawn operation was faulty, the newly
    spawned remote process could misbehave. The misbehavior
    included hanging or interpret an incoming message as an
    argument list to use. This was very unlikely to happen unless
    using an alternate implementation of the distribution protocol
    which made a faulty encoding of the argument list. The child
    process will now detect this error and terminate before
    executing the user specified code.
  * erts: Fix bugs where if the body of a matchspec would return a
    map with a variable ('$1', '$_' etc) as one of the keys or
    values and the variable was not an immidiate, the term would
    not be copied to the receiving processes heap. This would later
    corrupt the term in the table as the GC could place move
    markers in it, which in turn would cause the VM to crash. Bug
    has been present for since OTP 17.0.
  * xmerl: The xmerl version 1.3.32 was released in OTP 26.0.1, but
    the incorrect version number of 1.3.31.1 was used for it. This
    incorrect version number continued to appear in OTP 26.0.2, OTP
    26.1, and OTP 26.1.1. The actual xmerl code in these OTP
    versions however corresponds to xmerl version 1.3.32.
- Changes for 26.1.1:
  * wx: The wx application would fail to build on macOS with Xcode
    15.
  * compiler: The compiler could become extremely slow for modules
    containing huge functions.
  * stdlib: Garbage collect the shell process when reducing the
    amount of saved history and results.
- Changes for 26.1:
  * crypto: Fix VM crash caused by crypto being purged and reloaded
    (by init:restart for example) on OS with musl libc (such as
    Alpine linux).
  * crypto: Improved understanding of LibreSSL versions. Support
    chacha20 and chacha20_poly1305 for LibreSSL 3.7. Reflect
    removal of support for the DSS/DSA algorithm which was done in
    LibreSSL 2.6.1.
  * crypto: FIPS supported by crypto for OpenSSL 3.0.* and 3.1.*.
  * asn1: The ASN.1 compiler would ignore a constraint such as
    (SIZE (1..4), ...), causing incorrect behavior of the encoding
    and decoding function for the PER and UPER backends. Corrected
    to handle the constraint in the same way as (SIZE (1..4, ...)).
  * asn1: The JER backend has been internally refactored in a way
    that is compatible for applications that use the documented
    API. However, for a group of ASN.1 modules that depend on each
    other (for example, S1AP-PDU-Descriptions, S1AP-Contents, and
    so on), all modules in the group must be recompiled if on of
    the group members is recompiled.
  * observer: Closing the trace log window via the menu did not
    work.
  * erts: maps:put with existing key and identical value was not
    optimized as a no-op correctly if having the same 32-bit hash
    as another key in the map. In practice very rare and harmless.
  * erts: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * erts: Fixed a bug where the emulator was unable to determine
    the current cgroup CPU quota.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That is, the
    processes was not woken up to take care of the signal, so the
    signal would not be taken care of until the process was woken
    by another signal. Only processes configured with
    message_queue_data set to off_heap utilize this optimization.
  * erts: Function socket:close/1 could cause a VM crash on
    Windows.
  * erts: Fixed a bug in the ARM JIT where it could accidentally
    add garbage trailing bits when creating bitstrings whose size
    wasn't an even multiple of 8 bits.
  * erts: Fix erlang:system_info/1 documentation to show correct
    types.
  * erts: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * erts: Fix compilation with GNU termcap.
  * erts: Delivery time of message signals to a process not
    executing any receive expressions could become very long,
    potentially infinite. For example, a process checking for
    messages using process_info(self(), message_queue_len) or
    process_info(self(), messages) and avoiding to execute a
    receive expression matching on messages could be very slow in
    detecting new messages. Note that you are still discouraged
    from using process_info() this way. A process that wants to
    check if there are messages available to handle should execute
    a receive expression matching on messages.
  * erts: On AArch64 (ARM64), when calculating both the quotient
    and remainder with a divisor begin a power two, the remainder
    could be incorrectly calculated.
  * erts: Fix bug causing "magic" references in a compressed ETS
    table to not keep the referred object alive. The symptom would
    be the referred object being garbage collected prematurely and
    the reference appearing stale, not referring to anything.
    Examples of such magically referred objects are atomics and NIF
    resources.
  * erts: Matching out short bitstrings with a fixed size not
    divisible by 8 could could lead to the runtime system
    terminating with an "Overrun heap and stack" error.
  * erts: A constant flow of incoming non-message signals could
    prevent a process needing to execute dirty from doing so.
  * erts: A BEAM file usually contains a chunk with the tag "Type"
    containing type information that can be used by the JIT. The
    beam_lib:strip/1 takes care to preserve that chunk, but a
    build/release tool that does customized stripping could
    accidentally remove the chunk. Loading a BEAM file without the
    "Type" chunk could cause incorrect behavior of the loaded code.
  * erts: gen_udp:recv/* for Unix Domain Socket in binary mode and
    passive mode has been fixed to not crash.
  * erts: The cleanup operation of not yet delivered signals to a
    terminated process yielded excessively.
  * erts: Fixed minor hashing issue with the local option of
    term_to_binary()/term_to_iovec().
  * erts: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * erts: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * erts: In Erlang/OTP 27, by default escripts will be compiled
    before being executed. That means that the compiler application
    must be installed. It is possible to force the escript to be
    interpreted by adding the directive -mode(interpret). to the
    escript file. In Erlang/OTP 28, support for interpreting an
    escript will be removed.
  * erts: Add basic support for socket ioctl on Windows.
  * erts: Removed erts/etc/darwin/Info.plist, as it is no longer
    necessary after macos 10.12
  * erts: Add support for (Windows) socket option exclusiveaddruse.
  * erts: [socket] Add support for the 'nopush' option.
  * erts: Add support for socket option 'BSP STATE'.
  * erts: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * erts: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * compiler: The compiler could run forever when compiling a call
    to is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * compiler: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * compiler: The compiler would crash when compiling some modules
    that contained a call to erlang:load_nif/2.
  * compiler: Fixed a bug that caused the compiler to crash on
    legal code.
  * compiler: The compiler could crash when attempting to compile a
    call to is_list/1 in a complex expression.
  * compiler: A complex guard expression using the or operator
    could succeed when it was supposed to fail.
  * compiler: Compiling nested try/catch and catch expression could
    result in an internal compiler error.
  * compiler: Using the bnot operator in a complex expression could
    cause the compiler to terminate with an internal consistency
    failure diagnostic.
  * compiler: Fixed a bug that caused the compiler to crash in a
    binary optimization pass.
  * compiler: The compiler could terminate with an internal error
    when attempting to compile a binary pattern that could not
    possibly match.
  * compiler: Fixed various performance issues related to the alias
    optimization pass.
  * erl_docgen: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * mnesia: Do not delete old backup file if the new backup fails.
  * megaco: Make megaco transports handle gen_tcp | gen_udp with
    socket backend on Windows (completion).
  * common_test: With this change, ct_hooks manual refers to CTH
    execution order section in user guide.
  * common_test: With this change, Config data from
    pre_end_per_testcase hook is delivered to post_end_per_testcase
    callback in case of testcase timetrap or linked process crash.
  * common_test: With this change, remaining references to not
    supported vts tool in ct_run are removed (mainly relates to
    docs and ct_run help message).
  * common_test: With this change, prompt search functionality in
    ct_telnet handles unicode input.
  * common_test: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: The compiler could run forever when compiling a call to
    is_record/3 with a huge positive tuple size. The call
    is_record(A, a, 0) would crash the compiler when used in a
    function body. When used in a guard the compiler would emit
    incorrect code that would accept {a&gt; as a record.
  * stdlib: Fix bug in ets:tab2file that could make it fail if
    another Erlang process created the same file at the same time.
  * stdlib: An {else_clause,Value} exception will now be reported
    nicely in the shell.
  * stdlib: Correct return value for error case, so that it matches
    the documented and intended return value {error,
    {already_started, pid()} when local registered names are used.
  * stdlib: sys:get_state/1,2 and sys:replace_state/2,3 has been
    corrected to handle a state named error as a state name, not as
    a failed system callback. For the standard server behaviours
    this was an issue only for gen_statem (and gen_fsm) when the
    state name was error, and for gen_server if the complete state
    was {error,_}.
  * stdlib: Multiple problems were fixed in
    filelib:safe_relative_path/2. If its second argument was a path
    that contained symbolic links, an incorrect result patch could
    be returned. Also, paths were sometimes falsely considered
    unsafe.
  * stdlib: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * stdlib: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * stdlib: Fix h/2,3 to properly render multi-clause
    documentation.
  * stdlib: Timers created by timer:apply_after/4,
    apply_interval/4, and apply_repeatedly/4 would silently fail to
    do the apply if it was not possible to spawn a process when the
    timer expired. This has now been corrected, and if the spawn
    fails, the system will be taken down producing a crash dump.
  * stdlib: When an Erlang source file lacked a module definition,
    there would be a spurious "module name must not be empty"
    diagnostic for each spec in the file.
  * stdlib: The argument descriptions for option types in argparse
    have been made less ambiguous.
  * stdlib: Clarified the documentation of normal shutdown reason
    on gen_server:call/2,3
  * stdlib: Pattern matching and equivalence (=:=, =/=) comparisons
    on 0.0 will now raise a warning, as it will no longer be
    considered equivalent to -0.0 in OTP 27. If a match on 0.0
    specifically is desired (distinct from -0.0), the warning can
    be suppressed by writing +0.0 instead. The arithmetic
    comparison operators are unaffected, including arithmetic
    equality (==). *** POTENTIAL INCOMPATIBILITY ***
  * stdlib: The semantics of the gen_{server,statem,event}
    behaviour's synchronous start behaviour introduced in OTP-26.0
    with OTP-18471, has been clarified in the documentation.
  * stdlib: Added functionality to set a custom multiline prompt.
  * stdlib: A warning for (accidental use of) Triple-Quoted Strings
    has been implemented as per EEP 64. *** POTENTIAL
    INCOMPATIBILITY ***
  * stdlib: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Fixed an issue with truncated crash slogans on failed
    emulator start.
  * kernel: Fix shell:start_interactive function specification.
  * kernel: Fix code:get_doc/1 to return missing, when it can't
    find erts instead of crashing.
  * kernel: Function socket:close/1 could cause a VM crash on
    Windows.
  * kernel: Fix deadlock when erl.exe is used as part of a pipe on
    Windows and trying to set the encoding of the standard_io
    device.
  * kernel: Expanded the documentation about how to use the
    standard_io, standard_error and user I/O devices. Added the
    types io:standard_io/0, io:standard:error/0 and io:user/0.
  * kernel: Fix logger's overload protection mechanism to only
    fetch memory used by messages when needed.
  * kernel: Fixed a number of socket-related issues causing
    incompatibilities with gen_tcp and gen_udp respectively.
  * kernel: gen_tcp:connect with socket address and socket (inet-)
    backend fails because of missing callback function.
  * kernel: The DNS RR cache used by `inet_res` has been fixed to
    preserve insert order, which is beneficial when the DNS server
    returns RRs in some specific order for e.g load balancing
    purposes.
  * kernel: The options `reuseport`, `reuseport_lb` and
    `exclusiveaddruse` were accidentally not allowed for e.g
    `gen_udp:open/1,2`, which has now been corrected.
  * kernel: gen_udp:recv/* for Unix Domain Socket in binary mode
    and passive mode has been fixed to not crash.
  * kernel: Fixed issue where cursor would not be placed at the end
    of the expression when navigating shell history.
  * kernel: Update gen_tcp_socket and gen_udp_socket to handle
    'completion' (socket on Windows).
  * kernel: Add support for Unix Domain Sockets (only for STREAM
    sockets) on Windows for 'socket'.
  * kernel: Add basic support for socket ioctl on Windows.
  * kernel: The file:location/0 type is now exported.
  * kernel: Add support for (Windows) socket option
    exclusiveaddruse.
  * kernel: [socket] Add support for the 'nopush' option.
  * kernel: Add support for socket option 'BSP STATE'.
  * kernel: Add tcp socket options 'keepcnt', 'keepidle' and
    'keepintvl'.
  * kernel: Add support for misc (Windows) socket options
    ('max_msg_size' and 'maxdg').
  * kernel: The keyboard shortcuts for the shell are now
    configurable.
  * kernel: Optimized code_server to reduce repeated work when
    loading the same module concurrently.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The maybe expression is now supported in the
    Debugger.
  * debugger: The call int:no_break(Module) did not remove any
    breakpoints.
  * ssl: Avoid function clause error in ssl:getopts/2 by handling
    that inet:getopts may return an empty list during some
    circumstances, such as the socket being in a closing state.
  * ssl: The API function `ssl:recv/3` has been tightened to
    disallow negative length, which has never been documented to
    work, but was passed through and caused strange errors.
  * ssl: When a client initiated renegotiation was rejected and the
    client socket was in active mode the expected error message to
    the controlling process was not sent.
  * ssl: Add some guidance for signature algorithms configuration
    in ssl applications users guide.
  * snmp: Make snmp handle gen_udp with socket backend on Windows
    (completion).
  * public_key: Country name comparison shall be case insensitive
  * public_key: Add check to disallow duplicate certs in a path
  * inets: With this change, re_write httpd works as expected and
    does not return error.
  * inets: Fixed a bug so httpd does not crash when stopped at the
    wrong time during TLS connection negotiation, or any other
    theoretically as slow connection setup.
  * inets: Enhance error handling and avoid that the HTTP client
    hangs on headers provided on the wrong format.
  * inets: With this change, error report generated by httpd during
    connection setup contains socket type information.
  * inets: Stop and restart of the httpd server in the Inets
    application has been refactored to a more synchronous and OTP
    supervisor friendly approach. This should increase stability
    and for example avoid a supervisor report from
    httpd_connection_sup about killed child process(es) in some
    cases when stopping or restarting httpd.
  * dialyzer: Fixed a bug that caused dialyzer to crash when
    analyzing bogus code that contained the literal atom undefined
    in segment sizes.
  * dialyzer: Dialyzer could crash when attempting to analyze a
    module that defined a type called product/.
- Changes for 26.0.2:
  * erts: Fix using the IME (Input Method Editor) to enter text in
    cmd.exe and powershell.exe on Windows.
  * erts: Multiple socket:accept calls issue. When making multiple
    accept calls, only the last call is active.
  * erts: Fix the shell to ignore terminal delay when the terminal
    capabilities report that they should be used.
  * erts: Fix "oldshell" to echo characters while typing on
    Windows.
  * erts: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * erts: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * erts: The following functions are now much faster when given a
    long list or binary:
  * erts: On AArch64 (ARM64), equality and non-equality tests with
    literal bitstrings could succeed when they should fail and vice
    versa.
  * compiler: Fixed a type handling bug that would cause an
    internal consistence failure for correct code.
  * compiler: Fixed a bug that could cause the stack trace of throw
    exceptions to be erroneously optimized out.
  * compiler: Complex guard expression using 'or' were not always
    fully evaluated, making guards that were supposed to fail
    succeed.
  * stdlib: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * stdlib: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * stdlib: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * stdlib: The following functions are now much faster when given
    a long list or binary:
  * kernel: Fix bug where when you entered Alt+Enter in the
    terminal, the cursor would move to the last line, instead of
    moving to the next line.
  * kernel: Fix so that the shell does not crash on startup when
    termcap is not available.
  * kernel: Multiple socket:accept calls issue. When making
    multiple accept calls, only the last call is active.
  * kernel: Fix the shell to ignore terminal delay when the
    terminal capabilities report that they should be used.
  * kernel: Fix "oldshell" to echo characters while typing on
    Windows.
  * kernel: Fix eof handling when reading from stdin when erlang is
    started using -noshell.
  * kernel: On Windows, a call to the function socket:close, when
    there are waiting active calls to read, write or accept
    functions, could hang.
  * kernel: Fix issues when reading or configuring standard_io on
    Windows when erl.exe is started using -noshell flag.
  * kernel: gen_udp:connect with inet_backend = socket fails when
    the Address is a hostname (string or atom).
  * kernel: Fixed problem which would cause shell to crash if
    particular escape sequence was written to stdout.
  * kernel: Fixed problem where output would disappear if it was
    received after a prompt was written in the shell.
  * kernel: Fix a crash where the location of erts could not be
    found in rebar3 dev builds.
  * kernel: Introduce the KERNEL application parameter
    standard_io_encoding that can be used to set the default
    encoding for standard_io. This option needs to be set to latin1
    if the application wants to treat all input data as bytes
    rather than utf-8 encoded characters.
  * ssl: Added keylog information to all protocol versions in
    ssl:connection_information/2.
  * ssl: Add RFC-6083 considerations for DTLS to enable gen_sctp
    based callback for the transport.
  * ssh: Added multiline editing support to ssh clients connected
    through OTP ssh daemon.</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- Changes for 26.2.1:
  * erts: Removed unnecessary PCRE source tar-ball.
  * ssh: With this change (being response to CVE-2023-48795),
    ssh can negotiate "strict KEX" OpenSSH extension with
    peers supporting it; also
    'chacha20-poly1305@openssh.com' algorithm becomes a
    less preferred cipher.
    If strict KEX availability cannot be ensured on both
    connection sides, affected encryption modes(CHACHA and
    CBC) can be disabled with standard ssh configuration.
    This will provide protection against vulnerability, but
    at a cost of affecting interoperability. See
    Configuring algorithms in SSH. (bsc#1218192, CVE-2023-48795)
- Changes for 26.2:
  * all: Replaced unintentional Erlang Public License 1.1
    headers in some files with the intended Apache License
    2.0 header.
  * otp: The removal of the deprecated slave module, originally
    planned for OTP 27, has been postponed to OTP 29.
  * asn1: Fix benign warning from gcc 11 about mismatching call
    to free().
  * crypto: Enable engine support for OpenSSL versions 3.
  * edoc: Emit &lt;code&gt; instead of &lt;tt&gt;.
- Disable test suite for now, it has many false positives and
  takes a very long time.</changelog>
  <changelog author="sflees@suse.de" date="1706011200">- This codestream wasn't affected by bsc#1207113</changelog>
  <changelog author="sflees@suse.de" date="1706011201">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="sflees@suse.de" date="1715947200">- Create a versioned package for SLES</changelog>
</package>
<package pkgid="1784e58324c7041b115253c241339e6a7ab791884512c0705aedcf9cfb46146b" name="ethtool" arch="aarch64">
  <version epoch="0" ver="6.4" rel="150600.7.3.2"/>
  <changelog author="jengelh@inai.de" date="1420977600">- Update to new upstream release 3.18
  * Fix: Lookup of SFP Tx bias in SFF-8472 module diagnostics
  (-m option)
- Drop usrmerge compat symlinks</changelog>
  <changelog author="mkubecek@suse.cz" date="1433160000">- Update to new upstream release 4.0
  * Fix: Formatting of RX flow hash indirection table when size not
    divisible by 8 (-x option)
  * Fix: Add missing Advertised speeds (no option and -s option)
  * Feature: Add support to get expansion ROM version (-i option)
  * Feature: Include SFP serial number and date in EEPROM dump
    (-m option)</changelog>
  <changelog author="mkubecek@suse.cz" date="1444392000">- Update to new upstream release 4.2
  * Feature: Support soldered-on modules in module EEPROM dump
    (-m option)
  * Feature: Add register dump support for VMware vmxnet3
    (-d option)
  * Feature: Update register dump support for IBM EMAC (-d option)
    (requires Linux 4.3 or a future stable update to 4.1 or 4.2)
  * Doc: Fix typo in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1458043200">- Update to new upstream release 4.5
  * Fix: Heap corruption when dumping registers from a file
    (-d option)
  * Fix: Stricter input validation for EEPROM setting (-E option)
  * Feature: Add PHY statistics support (--phy-statistics option)
  * Feature: Support setting default Rx flow indirection table
    (-X option)
  * Doc: Properly indent sub-options in man page
  * address build issues (mostly compiler warnings)</changelog>
  <changelog author="mkubecek@suse.cz" date="1467633600">- Update to new upstream release 4.6
  * Feature: Support register dump on Intel X550 NICs (-d option)
  * Fix: Correct some reported register offsets on Intel 10GbE NICs
    (-d option)
  * Feature: Add IPv6 support to NFC (-n, -N, -u and -U options)
  * Feature: Add support for ETHTOOL_xLINKSETTINGS ioctls (no
    option and -s option)
  * Feature: Use netlink socket when AF_INET not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1476187200">- Update to new upstream release 4.8
  * Feature: QSFP Plus/QSFP28 Diagnostics Information Support
  * Feature: Enhancing link mode bits to support 25G/50G/100G
  * Feature: add support for 1000BaseX and missing 10G link mode
  * Fixes: address Coverity issues 1363118 - 1363125</changelog>
  <changelog author="mkubecek@suse.cz" date="1490875200">- Update to new upstream release 4.10
  * Fix: Fix the "advertise" parameter logic.
  * Feature: Implement ETHTOOL_PHY_GTUNABLE/ETHTOOL_PHY_STUNABLE and PHY downshift
  * Feature: add register dump support for fjes driver (-d option)
- add keyring with John Linville's key for tarball verification</changelog>
  <changelog author="mkubecek@suse.cz" date="1496750400">- Update to new upstream release 4.11
  * Feature: Support for configurable RSS hash function
  * Feature: support queue and VF fields for rxclass filters
  * Feature: Add support for 2500baseT/5000baseT link modes
  * Fix: Fix SFF 8079 cable technology bit parsing
  * Fix: sync help output for -x/-X with man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1509364800">- Update to new upstream release 4.13
  * Feature: add support for HWTSTAMP_FILTER_NTP_ALL
  * Feature: Add DMA Coalescing support
  * Feature: Remove UDP Fragmentation Offload error prints
  * Feature: stmmac: Add DMA HW Feature Register
  * Fix: Do not return error code if no changes were attempted.
  * Fix: Fix formatting of advertise bitmask
  * Fix: fix the rx vs tx mixup in set channel message</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929600">- add backported post-4.13 upstream fixes (bsc#1088294):
  ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
  ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
  ethtool-show-VF-and-queue-in-the-help-for-N.patch
  ethtool-correct-VF-index-values-for-the-ring_cookie-.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929601">- use %license rather than %doc for license file (bsc#1082318)</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929602">- add warning that changes should be submitted via git (i.e. not
  directly to IBS) to the specfile
- drop BuildRoot (no longer needed in SLE15)
- drop BuildRequire for xz (no longer needed in SLE15)</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209600">- fix stack clash for PHY tunables (bsc#1092037):
  ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
- sync UAPI header copies with SLE15 kernel:
  Revert-ethtool-Add-DMA-Coalescing-support.patch
  ethtool-copy.h-sync-with-net-next.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209601">- add support for RSS contexts (fate#326122 bsc#1105557):
  ethtool-copy.h-sync-with-net-next-2.patch
  ethtool-add-support-for-extra-RSS-contexts-and-RSS-s.patch
  ethtool.8-Document-RSS-context-control-and-RSS-filte.patch
  ethtool-don-t-fall-back-to-grxfhindir-when-context-w.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209602">- add support for FEC parameters (fate#326122 bsc#1105557):
  ethtool-Support-for-FEC-encoding-control.patch
  ethtool-support-combinations-of-FEC-modes.patch
  ethtool-better-syntax-for-combinations-of-FEC-modes.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1573041600">- upgrade to upstream version 5.3 (jsc#SLE-7328)
  * drop mainline backports contained in v5.3
    Revert-ethtool-Add-DMA-Coalescing-support.patch
    ethtool-Support-for-FEC-encoding-control.patch
    ethtool-add-support-for-extra-RSS-contexts-and-RSS-s.patch
    ethtool-better-syntax-for-combinations-of-FEC-modes.patch
    ethtool-copy.h-sync-with-net-next-2.patch
    ethtool-copy.h-sync-with-net-next.patch
    ethtool-correct-VF-index-values-for-the-ring_cookie-.patch
    ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
    ethtool-don-t-fall-back-to-grxfhindir-when-context-w.patch
    ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
    ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
    ethtool-show-VF-and-queue-in-the-help-for-N.patch
    ethtool-support-combinations-of-FEC-modes.patch
    ethtool.8-Document-RSS-context-control-and-RSS-filte.patch
  * provide bash completion
- minor specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- upgrade to upstream version 5.9 (jsc#SLE-15156, bsc#1178633)
- ethtool.spec:
  * minor cleanups from Factory package
  * drop compiler warnings suppression which is no longer needed
  * replace "-W" compiler option with preferred form "-Wextra"
- ethtool.keyring: add new upstream maintainer's key</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009601">- backport post-5.9 fixes (bsc#1178633)
  * netlink-fix-use-after-free-in-netlink_run_handler.patch
  * netlink-fix-leaked-instances-of-struct-nl_socket.patch
  * netlink-do-not-send-messages-and-process-replies-in-.patch
  * ethtool-Improve-compatibility-between-netlink-and-io.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1636113600">- upgrade to upstream version 5.14 (jsc#SLE-17360, jsc#SLE-19267)
  * upstream 5.9 -&gt; 5.10
  - Feature: infrastructure for JSON output
  - Feature: separate FLAGS in -h output
  - Feature: use policy dumps to check flags support
  - Feature: show pause stats (-a)
  - Feature: pretty printing of policy dumps
  - Feature: improve error message when SFP module is missing
  - Fix: use after free in netlink_run_handler()
  - Fix: leaked instances of struct nl_socket
  - Fix: improve compatibility between netlink and ioctl (-s)
  * upstream 5.10 -&gt; 5.12
  - Feature: support lanes count (no option and -s)
  - Fix: fix help message for master-slave parameter (-s)
  - Fix: better error message for master-slave in ioctl code path
  - Fix: get rid of compiler warnings in "make check"
  * upstream 5.12 -&gt; 5.13
  - Feature: netlink handler for FEC (--show-fec and --set-fec)
  - Feature: FEC stats support (--show-fec)
  - Feature: standard based stats support (-S)
  - Feature: netlink handler for module EEPROM dump (-m)
  - Feature: page, bank and i2c selection in module dump (-m)
  * upstream 5.13 -&gt; 5.14
  - Feature: do not silently ignore --json if unsupported
  - Feature: support new message types in pretty print
  * drop mainline backports contained in v5.14
    ethtool-Improve-compatibility-between-netlink-and-io.patch
    netlink-do-not-send-messages-and-process-replies-in-.patch
    netlink-fix-leaked-instances-of-struct-nl_socket.patch
    netlink-fix-use-after-free-in-netlink_run_handler.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1716206400">- upgrade to upstream version 6.4 (jsc#PED-5946 jsc#PED-8451)
  * for full list of changes between 5.14 and 6.4 see upstream
    changelog (file NEWS)
- cosmetic changes in specfile
- add post-6.4 upstream follow-up fixes (bsc#1224590)
  * netlink-Allow-nl_sset-return-EOPNOTSUPP-to-fallback-.patch
  * rxclass-fix-a-bug-in-rmgr-when-searching-for-empty-s.patch
  * Add-missing-header-files-for-source-distribution.patch
  * ethtool-Fix-SFF-8472-transceiver-module-identificati.patch
  * netlink-fix-typo-in-coalesce_reply_cb.patch
- fix SFP module diagnostic information (bsc#1222079)
  * ethtool-Fix-SFF-8472-transceiver-module-identificati.patch</changelog>
</package>
<package pkgid="bf1f9dcd9f3a71298d489467c60cd2d65a66aa747538ae0bf1d4e7415a98bb28" name="ethtool" arch="ppc64le">
  <version epoch="0" ver="6.4" rel="150600.7.3.2"/>
  <changelog author="jengelh@inai.de" date="1420977600">- Update to new upstream release 3.18
  * Fix: Lookup of SFP Tx bias in SFF-8472 module diagnostics
  (-m option)
- Drop usrmerge compat symlinks</changelog>
  <changelog author="mkubecek@suse.cz" date="1433160000">- Update to new upstream release 4.0
  * Fix: Formatting of RX flow hash indirection table when size not
    divisible by 8 (-x option)
  * Fix: Add missing Advertised speeds (no option and -s option)
  * Feature: Add support to get expansion ROM version (-i option)
  * Feature: Include SFP serial number and date in EEPROM dump
    (-m option)</changelog>
  <changelog author="mkubecek@suse.cz" date="1444392000">- Update to new upstream release 4.2
  * Feature: Support soldered-on modules in module EEPROM dump
    (-m option)
  * Feature: Add register dump support for VMware vmxnet3
    (-d option)
  * Feature: Update register dump support for IBM EMAC (-d option)
    (requires Linux 4.3 or a future stable update to 4.1 or 4.2)
  * Doc: Fix typo in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1458043200">- Update to new upstream release 4.5
  * Fix: Heap corruption when dumping registers from a file
    (-d option)
  * Fix: Stricter input validation for EEPROM setting (-E option)
  * Feature: Add PHY statistics support (--phy-statistics option)
  * Feature: Support setting default Rx flow indirection table
    (-X option)
  * Doc: Properly indent sub-options in man page
  * address build issues (mostly compiler warnings)</changelog>
  <changelog author="mkubecek@suse.cz" date="1467633600">- Update to new upstream release 4.6
  * Feature: Support register dump on Intel X550 NICs (-d option)
  * Fix: Correct some reported register offsets on Intel 10GbE NICs
    (-d option)
  * Feature: Add IPv6 support to NFC (-n, -N, -u and -U options)
  * Feature: Add support for ETHTOOL_xLINKSETTINGS ioctls (no
    option and -s option)
  * Feature: Use netlink socket when AF_INET not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1476187200">- Update to new upstream release 4.8
  * Feature: QSFP Plus/QSFP28 Diagnostics Information Support
  * Feature: Enhancing link mode bits to support 25G/50G/100G
  * Feature: add support for 1000BaseX and missing 10G link mode
  * Fixes: address Coverity issues 1363118 - 1363125</changelog>
  <changelog author="mkubecek@suse.cz" date="1490875200">- Update to new upstream release 4.10
  * Fix: Fix the "advertise" parameter logic.
  * Feature: Implement ETHTOOL_PHY_GTUNABLE/ETHTOOL_PHY_STUNABLE and PHY downshift
  * Feature: add register dump support for fjes driver (-d option)
- add keyring with John Linville's key for tarball verification</changelog>
  <changelog author="mkubecek@suse.cz" date="1496750400">- Update to new upstream release 4.11
  * Feature: Support for configurable RSS hash function
  * Feature: support queue and VF fields for rxclass filters
  * Feature: Add support for 2500baseT/5000baseT link modes
  * Fix: Fix SFF 8079 cable technology bit parsing
  * Fix: sync help output for -x/-X with man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1509364800">- Update to new upstream release 4.13
  * Feature: add support for HWTSTAMP_FILTER_NTP_ALL
  * Feature: Add DMA Coalescing support
  * Feature: Remove UDP Fragmentation Offload error prints
  * Feature: stmmac: Add DMA HW Feature Register
  * Fix: Do not return error code if no changes were attempted.
  * Fix: Fix formatting of advertise bitmask
  * Fix: fix the rx vs tx mixup in set channel message</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929600">- add backported post-4.13 upstream fixes (bsc#1088294):
  ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
  ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
  ethtool-show-VF-and-queue-in-the-help-for-N.patch
  ethtool-correct-VF-index-values-for-the-ring_cookie-.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929601">- use %license rather than %doc for license file (bsc#1082318)</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929602">- add warning that changes should be submitted via git (i.e. not
  directly to IBS) to the specfile
- drop BuildRoot (no longer needed in SLE15)
- drop BuildRequire for xz (no longer needed in SLE15)</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209600">- fix stack clash for PHY tunables (bsc#1092037):
  ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
- sync UAPI header copies with SLE15 kernel:
  Revert-ethtool-Add-DMA-Coalescing-support.patch
  ethtool-copy.h-sync-with-net-next.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209601">- add support for RSS contexts (fate#326122 bsc#1105557):
  ethtool-copy.h-sync-with-net-next-2.patch
  ethtool-add-support-for-extra-RSS-contexts-and-RSS-s.patch
  ethtool.8-Document-RSS-context-control-and-RSS-filte.patch
  ethtool-don-t-fall-back-to-grxfhindir-when-context-w.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209602">- add support for FEC parameters (fate#326122 bsc#1105557):
  ethtool-Support-for-FEC-encoding-control.patch
  ethtool-support-combinations-of-FEC-modes.patch
  ethtool-better-syntax-for-combinations-of-FEC-modes.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1573041600">- upgrade to upstream version 5.3 (jsc#SLE-7328)
  * drop mainline backports contained in v5.3
    Revert-ethtool-Add-DMA-Coalescing-support.patch
    ethtool-Support-for-FEC-encoding-control.patch
    ethtool-add-support-for-extra-RSS-contexts-and-RSS-s.patch
    ethtool-better-syntax-for-combinations-of-FEC-modes.patch
    ethtool-copy.h-sync-with-net-next-2.patch
    ethtool-copy.h-sync-with-net-next.patch
    ethtool-correct-VF-index-values-for-the-ring_cookie-.patch
    ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
    ethtool-don-t-fall-back-to-grxfhindir-when-context-w.patch
    ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
    ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
    ethtool-show-VF-and-queue-in-the-help-for-N.patch
    ethtool-support-combinations-of-FEC-modes.patch
    ethtool.8-Document-RSS-context-control-and-RSS-filte.patch
  * provide bash completion
- minor specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- upgrade to upstream version 5.9 (jsc#SLE-15156, bsc#1178633)
- ethtool.spec:
  * minor cleanups from Factory package
  * drop compiler warnings suppression which is no longer needed
  * replace "-W" compiler option with preferred form "-Wextra"
- ethtool.keyring: add new upstream maintainer's key</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009601">- backport post-5.9 fixes (bsc#1178633)
  * netlink-fix-use-after-free-in-netlink_run_handler.patch
  * netlink-fix-leaked-instances-of-struct-nl_socket.patch
  * netlink-do-not-send-messages-and-process-replies-in-.patch
  * ethtool-Improve-compatibility-between-netlink-and-io.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1636113600">- upgrade to upstream version 5.14 (jsc#SLE-17360, jsc#SLE-19267)
  * upstream 5.9 -&gt; 5.10
  - Feature: infrastructure for JSON output
  - Feature: separate FLAGS in -h output
  - Feature: use policy dumps to check flags support
  - Feature: show pause stats (-a)
  - Feature: pretty printing of policy dumps
  - Feature: improve error message when SFP module is missing
  - Fix: use after free in netlink_run_handler()
  - Fix: leaked instances of struct nl_socket
  - Fix: improve compatibility between netlink and ioctl (-s)
  * upstream 5.10 -&gt; 5.12
  - Feature: support lanes count (no option and -s)
  - Fix: fix help message for master-slave parameter (-s)
  - Fix: better error message for master-slave in ioctl code path
  - Fix: get rid of compiler warnings in "make check"
  * upstream 5.12 -&gt; 5.13
  - Feature: netlink handler for FEC (--show-fec and --set-fec)
  - Feature: FEC stats support (--show-fec)
  - Feature: standard based stats support (-S)
  - Feature: netlink handler for module EEPROM dump (-m)
  - Feature: page, bank and i2c selection in module dump (-m)
  * upstream 5.13 -&gt; 5.14
  - Feature: do not silently ignore --json if unsupported
  - Feature: support new message types in pretty print
  * drop mainline backports contained in v5.14
    ethtool-Improve-compatibility-between-netlink-and-io.patch
    netlink-do-not-send-messages-and-process-replies-in-.patch
    netlink-fix-leaked-instances-of-struct-nl_socket.patch
    netlink-fix-use-after-free-in-netlink_run_handler.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1716206400">- upgrade to upstream version 6.4 (jsc#PED-5946 jsc#PED-8451)
  * for full list of changes between 5.14 and 6.4 see upstream
    changelog (file NEWS)
- cosmetic changes in specfile
- add post-6.4 upstream follow-up fixes (bsc#1224590)
  * netlink-Allow-nl_sset-return-EOPNOTSUPP-to-fallback-.patch
  * rxclass-fix-a-bug-in-rmgr-when-searching-for-empty-s.patch
  * Add-missing-header-files-for-source-distribution.patch
  * ethtool-Fix-SFF-8472-transceiver-module-identificati.patch
  * netlink-fix-typo-in-coalesce_reply_cb.patch
- fix SFP module diagnostic information (bsc#1222079)
  * ethtool-Fix-SFF-8472-transceiver-module-identificati.patch</changelog>
</package>
<package pkgid="fadec4da8a975b7b69581c81cb8d85bb3b0db6bc0599c0d5860c079b053da7cd" name="ethtool" arch="s390x">
  <version epoch="0" ver="6.4" rel="150600.7.3.2"/>
  <changelog author="jengelh@inai.de" date="1420977600">- Update to new upstream release 3.18
  * Fix: Lookup of SFP Tx bias in SFF-8472 module diagnostics
  (-m option)
- Drop usrmerge compat symlinks</changelog>
  <changelog author="mkubecek@suse.cz" date="1433160000">- Update to new upstream release 4.0
  * Fix: Formatting of RX flow hash indirection table when size not
    divisible by 8 (-x option)
  * Fix: Add missing Advertised speeds (no option and -s option)
  * Feature: Add support to get expansion ROM version (-i option)
  * Feature: Include SFP serial number and date in EEPROM dump
    (-m option)</changelog>
  <changelog author="mkubecek@suse.cz" date="1444392000">- Update to new upstream release 4.2
  * Feature: Support soldered-on modules in module EEPROM dump
    (-m option)
  * Feature: Add register dump support for VMware vmxnet3
    (-d option)
  * Feature: Update register dump support for IBM EMAC (-d option)
    (requires Linux 4.3 or a future stable update to 4.1 or 4.2)
  * Doc: Fix typo in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1458043200">- Update to new upstream release 4.5
  * Fix: Heap corruption when dumping registers from a file
    (-d option)
  * Fix: Stricter input validation for EEPROM setting (-E option)
  * Feature: Add PHY statistics support (--phy-statistics option)
  * Feature: Support setting default Rx flow indirection table
    (-X option)
  * Doc: Properly indent sub-options in man page
  * address build issues (mostly compiler warnings)</changelog>
  <changelog author="mkubecek@suse.cz" date="1467633600">- Update to new upstream release 4.6
  * Feature: Support register dump on Intel X550 NICs (-d option)
  * Fix: Correct some reported register offsets on Intel 10GbE NICs
    (-d option)
  * Feature: Add IPv6 support to NFC (-n, -N, -u and -U options)
  * Feature: Add support for ETHTOOL_xLINKSETTINGS ioctls (no
    option and -s option)
  * Feature: Use netlink socket when AF_INET not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1476187200">- Update to new upstream release 4.8
  * Feature: QSFP Plus/QSFP28 Diagnostics Information Support
  * Feature: Enhancing link mode bits to support 25G/50G/100G
  * Feature: add support for 1000BaseX and missing 10G link mode
  * Fixes: address Coverity issues 1363118 - 1363125</changelog>
  <changelog author="mkubecek@suse.cz" date="1490875200">- Update to new upstream release 4.10
  * Fix: Fix the "advertise" parameter logic.
  * Feature: Implement ETHTOOL_PHY_GTUNABLE/ETHTOOL_PHY_STUNABLE and PHY downshift
  * Feature: add register dump support for fjes driver (-d option)
- add keyring with John Linville's key for tarball verification</changelog>
  <changelog author="mkubecek@suse.cz" date="1496750400">- Update to new upstream release 4.11
  * Feature: Support for configurable RSS hash function
  * Feature: support queue and VF fields for rxclass filters
  * Feature: Add support for 2500baseT/5000baseT link modes
  * Fix: Fix SFF 8079 cable technology bit parsing
  * Fix: sync help output for -x/-X with man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1509364800">- Update to new upstream release 4.13
  * Feature: add support for HWTSTAMP_FILTER_NTP_ALL
  * Feature: Add DMA Coalescing support
  * Feature: Remove UDP Fragmentation Offload error prints
  * Feature: stmmac: Add DMA HW Feature Register
  * Fix: Do not return error code if no changes were attempted.
  * Fix: Fix formatting of advertise bitmask
  * Fix: fix the rx vs tx mixup in set channel message</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929600">- add backported post-4.13 upstream fixes (bsc#1088294):
  ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
  ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
  ethtool-show-VF-and-queue-in-the-help-for-N.patch
  ethtool-correct-VF-index-values-for-the-ring_cookie-.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929601">- use %license rather than %doc for license file (bsc#1082318)</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929602">- add warning that changes should be submitted via git (i.e. not
  directly to IBS) to the specfile
- drop BuildRoot (no longer needed in SLE15)
- drop BuildRequire for xz (no longer needed in SLE15)</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209600">- fix stack clash for PHY tunables (bsc#1092037):
  ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
- sync UAPI header copies with SLE15 kernel:
  Revert-ethtool-Add-DMA-Coalescing-support.patch
  ethtool-copy.h-sync-with-net-next.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209601">- add support for RSS contexts (fate#326122 bsc#1105557):
  ethtool-copy.h-sync-with-net-next-2.patch
  ethtool-add-support-for-extra-RSS-contexts-and-RSS-s.patch
  ethtool.8-Document-RSS-context-control-and-RSS-filte.patch
  ethtool-don-t-fall-back-to-grxfhindir-when-context-w.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209602">- add support for FEC parameters (fate#326122 bsc#1105557):
  ethtool-Support-for-FEC-encoding-control.patch
  ethtool-support-combinations-of-FEC-modes.patch
  ethtool-better-syntax-for-combinations-of-FEC-modes.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1573041600">- upgrade to upstream version 5.3 (jsc#SLE-7328)
  * drop mainline backports contained in v5.3
    Revert-ethtool-Add-DMA-Coalescing-support.patch
    ethtool-Support-for-FEC-encoding-control.patch
    ethtool-add-support-for-extra-RSS-contexts-and-RSS-s.patch
    ethtool-better-syntax-for-combinations-of-FEC-modes.patch
    ethtool-copy.h-sync-with-net-next-2.patch
    ethtool-copy.h-sync-with-net-next.patch
    ethtool-correct-VF-index-values-for-the-ring_cookie-.patch
    ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
    ethtool-don-t-fall-back-to-grxfhindir-when-context-w.patch
    ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
    ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
    ethtool-show-VF-and-queue-in-the-help-for-N.patch
    ethtool-support-combinations-of-FEC-modes.patch
    ethtool.8-Document-RSS-context-control-and-RSS-filte.patch
  * provide bash completion
- minor specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- upgrade to upstream version 5.9 (jsc#SLE-15156, bsc#1178633)
- ethtool.spec:
  * minor cleanups from Factory package
  * drop compiler warnings suppression which is no longer needed
  * replace "-W" compiler option with preferred form "-Wextra"
- ethtool.keyring: add new upstream maintainer's key</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009601">- backport post-5.9 fixes (bsc#1178633)
  * netlink-fix-use-after-free-in-netlink_run_handler.patch
  * netlink-fix-leaked-instances-of-struct-nl_socket.patch
  * netlink-do-not-send-messages-and-process-replies-in-.patch
  * ethtool-Improve-compatibility-between-netlink-and-io.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1636113600">- upgrade to upstream version 5.14 (jsc#SLE-17360, jsc#SLE-19267)
  * upstream 5.9 -&gt; 5.10
  - Feature: infrastructure for JSON output
  - Feature: separate FLAGS in -h output
  - Feature: use policy dumps to check flags support
  - Feature: show pause stats (-a)
  - Feature: pretty printing of policy dumps
  - Feature: improve error message when SFP module is missing
  - Fix: use after free in netlink_run_handler()
  - Fix: leaked instances of struct nl_socket
  - Fix: improve compatibility between netlink and ioctl (-s)
  * upstream 5.10 -&gt; 5.12
  - Feature: support lanes count (no option and -s)
  - Fix: fix help message for master-slave parameter (-s)
  - Fix: better error message for master-slave in ioctl code path
  - Fix: get rid of compiler warnings in "make check"
  * upstream 5.12 -&gt; 5.13
  - Feature: netlink handler for FEC (--show-fec and --set-fec)
  - Feature: FEC stats support (--show-fec)
  - Feature: standard based stats support (-S)
  - Feature: netlink handler for module EEPROM dump (-m)
  - Feature: page, bank and i2c selection in module dump (-m)
  * upstream 5.13 -&gt; 5.14
  - Feature: do not silently ignore --json if unsupported
  - Feature: support new message types in pretty print
  * drop mainline backports contained in v5.14
    ethtool-Improve-compatibility-between-netlink-and-io.patch
    netlink-do-not-send-messages-and-process-replies-in-.patch
    netlink-fix-leaked-instances-of-struct-nl_socket.patch
    netlink-fix-use-after-free-in-netlink_run_handler.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1716206400">- upgrade to upstream version 6.4 (jsc#PED-5946 jsc#PED-8451)
  * for full list of changes between 5.14 and 6.4 see upstream
    changelog (file NEWS)
- cosmetic changes in specfile
- add post-6.4 upstream follow-up fixes (bsc#1224590)
  * netlink-Allow-nl_sset-return-EOPNOTSUPP-to-fallback-.patch
  * rxclass-fix-a-bug-in-rmgr-when-searching-for-empty-s.patch
  * Add-missing-header-files-for-source-distribution.patch
  * ethtool-Fix-SFF-8472-transceiver-module-identificati.patch
  * netlink-fix-typo-in-coalesce_reply_cb.patch
- fix SFP module diagnostic information (bsc#1222079)
  * ethtool-Fix-SFF-8472-transceiver-module-identificati.patch</changelog>
</package>
<package pkgid="ce964b5b459d20ceaaec3b612d4c0ffd2a08c134e63eda2b6991cb6f1e599c41" name="ethtool" arch="src">
  <version epoch="0" ver="6.4" rel="150600.7.3.2"/>
  <changelog author="jengelh@inai.de" date="1420977600">- Update to new upstream release 3.18
  * Fix: Lookup of SFP Tx bias in SFF-8472 module diagnostics
  (-m option)
- Drop usrmerge compat symlinks</changelog>
  <changelog author="mkubecek@suse.cz" date="1433160000">- Update to new upstream release 4.0
  * Fix: Formatting of RX flow hash indirection table when size not
    divisible by 8 (-x option)
  * Fix: Add missing Advertised speeds (no option and -s option)
  * Feature: Add support to get expansion ROM version (-i option)
  * Feature: Include SFP serial number and date in EEPROM dump
    (-m option)</changelog>
  <changelog author="mkubecek@suse.cz" date="1444392000">- Update to new upstream release 4.2
  * Feature: Support soldered-on modules in module EEPROM dump
    (-m option)
  * Feature: Add register dump support for VMware vmxnet3
    (-d option)
  * Feature: Update register dump support for IBM EMAC (-d option)
    (requires Linux 4.3 or a future stable update to 4.1 or 4.2)
  * Doc: Fix typo in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1458043200">- Update to new upstream release 4.5
  * Fix: Heap corruption when dumping registers from a file
    (-d option)
  * Fix: Stricter input validation for EEPROM setting (-E option)
  * Feature: Add PHY statistics support (--phy-statistics option)
  * Feature: Support setting default Rx flow indirection table
    (-X option)
  * Doc: Properly indent sub-options in man page
  * address build issues (mostly compiler warnings)</changelog>
  <changelog author="mkubecek@suse.cz" date="1467633600">- Update to new upstream release 4.6
  * Feature: Support register dump on Intel X550 NICs (-d option)
  * Fix: Correct some reported register offsets on Intel 10GbE NICs
    (-d option)
  * Feature: Add IPv6 support to NFC (-n, -N, -u and -U options)
  * Feature: Add support for ETHTOOL_xLINKSETTINGS ioctls (no
    option and -s option)
  * Feature: Use netlink socket when AF_INET not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1476187200">- Update to new upstream release 4.8
  * Feature: QSFP Plus/QSFP28 Diagnostics Information Support
  * Feature: Enhancing link mode bits to support 25G/50G/100G
  * Feature: add support for 1000BaseX and missing 10G link mode
  * Fixes: address Coverity issues 1363118 - 1363125</changelog>
  <changelog author="mkubecek@suse.cz" date="1490875200">- Update to new upstream release 4.10
  * Fix: Fix the "advertise" parameter logic.
  * Feature: Implement ETHTOOL_PHY_GTUNABLE/ETHTOOL_PHY_STUNABLE and PHY downshift
  * Feature: add register dump support for fjes driver (-d option)
- add keyring with John Linville's key for tarball verification</changelog>
  <changelog author="mkubecek@suse.cz" date="1496750400">- Update to new upstream release 4.11
  * Feature: Support for configurable RSS hash function
  * Feature: support queue and VF fields for rxclass filters
  * Feature: Add support for 2500baseT/5000baseT link modes
  * Fix: Fix SFF 8079 cable technology bit parsing
  * Fix: sync help output for -x/-X with man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1509364800">- Update to new upstream release 4.13
  * Feature: add support for HWTSTAMP_FILTER_NTP_ALL
  * Feature: Add DMA Coalescing support
  * Feature: Remove UDP Fragmentation Offload error prints
  * Feature: stmmac: Add DMA HW Feature Register
  * Fix: Do not return error code if no changes were attempted.
  * Fix: Fix formatting of advertise bitmask
  * Fix: fix the rx vs tx mixup in set channel message</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929600">- add backported post-4.13 upstream fixes (bsc#1088294):
  ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
  ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
  ethtool-show-VF-and-queue-in-the-help-for-N.patch
  ethtool-correct-VF-index-values-for-the-ring_cookie-.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929601">- use %license rather than %doc for license file (bsc#1082318)</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929602">- add warning that changes should be submitted via git (i.e. not
  directly to IBS) to the specfile
- drop BuildRoot (no longer needed in SLE15)
- drop BuildRequire for xz (no longer needed in SLE15)</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209600">- fix stack clash for PHY tunables (bsc#1092037):
  ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
- sync UAPI header copies with SLE15 kernel:
  Revert-ethtool-Add-DMA-Coalescing-support.patch
  ethtool-copy.h-sync-with-net-next.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209601">- add support for RSS contexts (fate#326122 bsc#1105557):
  ethtool-copy.h-sync-with-net-next-2.patch
  ethtool-add-support-for-extra-RSS-contexts-and-RSS-s.patch
  ethtool.8-Document-RSS-context-control-and-RSS-filte.patch
  ethtool-don-t-fall-back-to-grxfhindir-when-context-w.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209602">- add support for FEC parameters (fate#326122 bsc#1105557):
  ethtool-Support-for-FEC-encoding-control.patch
  ethtool-support-combinations-of-FEC-modes.patch
  ethtool-better-syntax-for-combinations-of-FEC-modes.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1573041600">- upgrade to upstream version 5.3 (jsc#SLE-7328)
  * drop mainline backports contained in v5.3
    Revert-ethtool-Add-DMA-Coalescing-support.patch
    ethtool-Support-for-FEC-encoding-control.patch
    ethtool-add-support-for-extra-RSS-contexts-and-RSS-s.patch
    ethtool-better-syntax-for-combinations-of-FEC-modes.patch
    ethtool-copy.h-sync-with-net-next-2.patch
    ethtool-copy.h-sync-with-net-next.patch
    ethtool-correct-VF-index-values-for-the-ring_cookie-.patch
    ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
    ethtool-don-t-fall-back-to-grxfhindir-when-context-w.patch
    ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
    ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
    ethtool-show-VF-and-queue-in-the-help-for-N.patch
    ethtool-support-combinations-of-FEC-modes.patch
    ethtool.8-Document-RSS-context-control-and-RSS-filte.patch
  * provide bash completion
- minor specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- upgrade to upstream version 5.9 (jsc#SLE-15156, bsc#1178633)
- ethtool.spec:
  * minor cleanups from Factory package
  * drop compiler warnings suppression which is no longer needed
  * replace "-W" compiler option with preferred form "-Wextra"
- ethtool.keyring: add new upstream maintainer's key</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009601">- backport post-5.9 fixes (bsc#1178633)
  * netlink-fix-use-after-free-in-netlink_run_handler.patch
  * netlink-fix-leaked-instances-of-struct-nl_socket.patch
  * netlink-do-not-send-messages-and-process-replies-in-.patch
  * ethtool-Improve-compatibility-between-netlink-and-io.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1636113600">- upgrade to upstream version 5.14 (jsc#SLE-17360, jsc#SLE-19267)
  * upstream 5.9 -&gt; 5.10
  - Feature: infrastructure for JSON output
  - Feature: separate FLAGS in -h output
  - Feature: use policy dumps to check flags support
  - Feature: show pause stats (-a)
  - Feature: pretty printing of policy dumps
  - Feature: improve error message when SFP module is missing
  - Fix: use after free in netlink_run_handler()
  - Fix: leaked instances of struct nl_socket
  - Fix: improve compatibility between netlink and ioctl (-s)
  * upstream 5.10 -&gt; 5.12
  - Feature: support lanes count (no option and -s)
  - Fix: fix help message for master-slave parameter (-s)
  - Fix: better error message for master-slave in ioctl code path
  - Fix: get rid of compiler warnings in "make check"
  * upstream 5.12 -&gt; 5.13
  - Feature: netlink handler for FEC (--show-fec and --set-fec)
  - Feature: FEC stats support (--show-fec)
  - Feature: standard based stats support (-S)
  - Feature: netlink handler for module EEPROM dump (-m)
  - Feature: page, bank and i2c selection in module dump (-m)
  * upstream 5.13 -&gt; 5.14
  - Feature: do not silently ignore --json if unsupported
  - Feature: support new message types in pretty print
  * drop mainline backports contained in v5.14
    ethtool-Improve-compatibility-between-netlink-and-io.patch
    netlink-do-not-send-messages-and-process-replies-in-.patch
    netlink-fix-leaked-instances-of-struct-nl_socket.patch
    netlink-fix-use-after-free-in-netlink_run_handler.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1716206400">- upgrade to upstream version 6.4 (jsc#PED-5946 jsc#PED-8451)
  * for full list of changes between 5.14 and 6.4 see upstream
    changelog (file NEWS)
- cosmetic changes in specfile
- add post-6.4 upstream follow-up fixes (bsc#1224590)
  * netlink-Allow-nl_sset-return-EOPNOTSUPP-to-fallback-.patch
  * rxclass-fix-a-bug-in-rmgr-when-searching-for-empty-s.patch
  * Add-missing-header-files-for-source-distribution.patch
  * ethtool-Fix-SFF-8472-transceiver-module-identificati.patch
  * netlink-fix-typo-in-coalesce_reply_cb.patch
- fix SFP module diagnostic information (bsc#1222079)
  * ethtool-Fix-SFF-8472-transceiver-module-identificati.patch</changelog>
</package>
<package pkgid="7f50cb792b51dea8c67f9aa73c8914ef30a84c1af02a4c9f490e1d3e2dea6a15" name="ethtool" arch="x86_64">
  <version epoch="0" ver="6.4" rel="150600.7.3.2"/>
  <changelog author="jengelh@inai.de" date="1420977600">- Update to new upstream release 3.18
  * Fix: Lookup of SFP Tx bias in SFF-8472 module diagnostics
  (-m option)
- Drop usrmerge compat symlinks</changelog>
  <changelog author="mkubecek@suse.cz" date="1433160000">- Update to new upstream release 4.0
  * Fix: Formatting of RX flow hash indirection table when size not
    divisible by 8 (-x option)
  * Fix: Add missing Advertised speeds (no option and -s option)
  * Feature: Add support to get expansion ROM version (-i option)
  * Feature: Include SFP serial number and date in EEPROM dump
    (-m option)</changelog>
  <changelog author="mkubecek@suse.cz" date="1444392000">- Update to new upstream release 4.2
  * Feature: Support soldered-on modules in module EEPROM dump
    (-m option)
  * Feature: Add register dump support for VMware vmxnet3
    (-d option)
  * Feature: Update register dump support for IBM EMAC (-d option)
    (requires Linux 4.3 or a future stable update to 4.1 or 4.2)
  * Doc: Fix typo in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1458043200">- Update to new upstream release 4.5
  * Fix: Heap corruption when dumping registers from a file
    (-d option)
  * Fix: Stricter input validation for EEPROM setting (-E option)
  * Feature: Add PHY statistics support (--phy-statistics option)
  * Feature: Support setting default Rx flow indirection table
    (-X option)
  * Doc: Properly indent sub-options in man page
  * address build issues (mostly compiler warnings)</changelog>
  <changelog author="mkubecek@suse.cz" date="1467633600">- Update to new upstream release 4.6
  * Feature: Support register dump on Intel X550 NICs (-d option)
  * Fix: Correct some reported register offsets on Intel 10GbE NICs
    (-d option)
  * Feature: Add IPv6 support to NFC (-n, -N, -u and -U options)
  * Feature: Add support for ETHTOOL_xLINKSETTINGS ioctls (no
    option and -s option)
  * Feature: Use netlink socket when AF_INET not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1476187200">- Update to new upstream release 4.8
  * Feature: QSFP Plus/QSFP28 Diagnostics Information Support
  * Feature: Enhancing link mode bits to support 25G/50G/100G
  * Feature: add support for 1000BaseX and missing 10G link mode
  * Fixes: address Coverity issues 1363118 - 1363125</changelog>
  <changelog author="mkubecek@suse.cz" date="1490875200">- Update to new upstream release 4.10
  * Fix: Fix the "advertise" parameter logic.
  * Feature: Implement ETHTOOL_PHY_GTUNABLE/ETHTOOL_PHY_STUNABLE and PHY downshift
  * Feature: add register dump support for fjes driver (-d option)
- add keyring with John Linville's key for tarball verification</changelog>
  <changelog author="mkubecek@suse.cz" date="1496750400">- Update to new upstream release 4.11
  * Feature: Support for configurable RSS hash function
  * Feature: support queue and VF fields for rxclass filters
  * Feature: Add support for 2500baseT/5000baseT link modes
  * Fix: Fix SFF 8079 cable technology bit parsing
  * Fix: sync help output for -x/-X with man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1509364800">- Update to new upstream release 4.13
  * Feature: add support for HWTSTAMP_FILTER_NTP_ALL
  * Feature: Add DMA Coalescing support
  * Feature: Remove UDP Fragmentation Offload error prints
  * Feature: stmmac: Add DMA HW Feature Register
  * Fix: Do not return error code if no changes were attempted.
  * Fix: Fix formatting of advertise bitmask
  * Fix: fix the rx vs tx mixup in set channel message</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929600">- add backported post-4.13 upstream fixes (bsc#1088294):
  ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
  ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
  ethtool-show-VF-and-queue-in-the-help-for-N.patch
  ethtool-correct-VF-index-values-for-the-ring_cookie-.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929601">- use %license rather than %doc for license file (bsc#1082318)</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929602">- add warning that changes should be submitted via git (i.e. not
  directly to IBS) to the specfile
- drop BuildRoot (no longer needed in SLE15)
- drop BuildRequire for xz (no longer needed in SLE15)</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209600">- fix stack clash for PHY tunables (bsc#1092037):
  ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
- sync UAPI header copies with SLE15 kernel:
  Revert-ethtool-Add-DMA-Coalescing-support.patch
  ethtool-copy.h-sync-with-net-next.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209601">- add support for RSS contexts (fate#326122 bsc#1105557):
  ethtool-copy.h-sync-with-net-next-2.patch
  ethtool-add-support-for-extra-RSS-contexts-and-RSS-s.patch
  ethtool.8-Document-RSS-context-control-and-RSS-filte.patch
  ethtool-don-t-fall-back-to-grxfhindir-when-context-w.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209602">- add support for FEC parameters (fate#326122 bsc#1105557):
  ethtool-Support-for-FEC-encoding-control.patch
  ethtool-support-combinations-of-FEC-modes.patch
  ethtool-better-syntax-for-combinations-of-FEC-modes.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1573041600">- upgrade to upstream version 5.3 (jsc#SLE-7328)
  * drop mainline backports contained in v5.3
    Revert-ethtool-Add-DMA-Coalescing-support.patch
    ethtool-Support-for-FEC-encoding-control.patch
    ethtool-add-support-for-extra-RSS-contexts-and-RSS-s.patch
    ethtool-better-syntax-for-combinations-of-FEC-modes.patch
    ethtool-copy.h-sync-with-net-next-2.patch
    ethtool-copy.h-sync-with-net-next.patch
    ethtool-correct-VF-index-values-for-the-ring_cookie-.patch
    ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
    ethtool-don-t-fall-back-to-grxfhindir-when-context-w.patch
    ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
    ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
    ethtool-show-VF-and-queue-in-the-help-for-N.patch
    ethtool-support-combinations-of-FEC-modes.patch
    ethtool.8-Document-RSS-context-control-and-RSS-filte.patch
  * provide bash completion
- minor specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- upgrade to upstream version 5.9 (jsc#SLE-15156, bsc#1178633)
- ethtool.spec:
  * minor cleanups from Factory package
  * drop compiler warnings suppression which is no longer needed
  * replace "-W" compiler option with preferred form "-Wextra"
- ethtool.keyring: add new upstream maintainer's key</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009601">- backport post-5.9 fixes (bsc#1178633)
  * netlink-fix-use-after-free-in-netlink_run_handler.patch
  * netlink-fix-leaked-instances-of-struct-nl_socket.patch
  * netlink-do-not-send-messages-and-process-replies-in-.patch
  * ethtool-Improve-compatibility-between-netlink-and-io.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1636113600">- upgrade to upstream version 5.14 (jsc#SLE-17360, jsc#SLE-19267)
  * upstream 5.9 -&gt; 5.10
  - Feature: infrastructure for JSON output
  - Feature: separate FLAGS in -h output
  - Feature: use policy dumps to check flags support
  - Feature: show pause stats (-a)
  - Feature: pretty printing of policy dumps
  - Feature: improve error message when SFP module is missing
  - Fix: use after free in netlink_run_handler()
  - Fix: leaked instances of struct nl_socket
  - Fix: improve compatibility between netlink and ioctl (-s)
  * upstream 5.10 -&gt; 5.12
  - Feature: support lanes count (no option and -s)
  - Fix: fix help message for master-slave parameter (-s)
  - Fix: better error message for master-slave in ioctl code path
  - Fix: get rid of compiler warnings in "make check"
  * upstream 5.12 -&gt; 5.13
  - Feature: netlink handler for FEC (--show-fec and --set-fec)
  - Feature: FEC stats support (--show-fec)
  - Feature: standard based stats support (-S)
  - Feature: netlink handler for module EEPROM dump (-m)
  - Feature: page, bank and i2c selection in module dump (-m)
  * upstream 5.13 -&gt; 5.14
  - Feature: do not silently ignore --json if unsupported
  - Feature: support new message types in pretty print
  * drop mainline backports contained in v5.14
    ethtool-Improve-compatibility-between-netlink-and-io.patch
    netlink-do-not-send-messages-and-process-replies-in-.patch
    netlink-fix-leaked-instances-of-struct-nl_socket.patch
    netlink-fix-use-after-free-in-netlink_run_handler.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1716206400">- upgrade to upstream version 6.4 (jsc#PED-5946 jsc#PED-8451)
  * for full list of changes between 5.14 and 6.4 see upstream
    changelog (file NEWS)
- cosmetic changes in specfile
- add post-6.4 upstream follow-up fixes (bsc#1224590)
  * netlink-Allow-nl_sset-return-EOPNOTSUPP-to-fallback-.patch
  * rxclass-fix-a-bug-in-rmgr-when-searching-for-empty-s.patch
  * Add-missing-header-files-for-source-distribution.patch
  * ethtool-Fix-SFF-8472-transceiver-module-identificati.patch
  * netlink-fix-typo-in-coalesce_reply_cb.patch
- fix SFP module diagnostic information (bsc#1222079)
  * ethtool-Fix-SFF-8472-transceiver-module-identificati.patch</changelog>
</package>
<package pkgid="f5c4ebde2da4f4de680e555c64fd140a24f9df19b2d1c05a8e97347e54d94e91" name="fdupes" arch="aarch64">
  <version epoch="0" ver="2.3.0" rel="150400.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1419163200">- add -L (--linkhard) option
  add 50_bts284274_hardlinkreplace.dpatch</changelog>
  <changelog author="tchvatal@suse.com" date="1438603200">- Update to upstream git repo on github
- Refresh patches:
  * fdupes-makefile.patch
  * 0008-speedup-the-file-compare.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
  * 50_bts284274_hardlinkreplace.dpatch
- Upstreamed patch:
  * 0004-Large-file-support-for-2GB-files-bts447601.patch
- Remove whitespace from fdupes.macros file
- Cleanup with spec-cleaner
  - Obey rpm-opt-flags
  - run test phase</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- By default relink hardlinks too, should fix bnc#940296</changelog>
  <changelog author="psimons@suse.com" date="1478260800">- Update to version 1.6.1. The following patches have been applied
  upstream and were dropped:
  * 0001-restore-pristine-code.patch
  * 0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
  * 0003-Fix-a-typo-in-a-manpage-bts353789.patch
  * 0005-add-summarize-to-manpage-bts481809.patch
  * 0006-add-nohidden-support-bts511702.patch
  * 0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0008-speedup-the-file-compare.patch
  * 0009-glibc-endianness-check-in-md5.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
- 50_bts284274_hardlinkreplace.dpatch had to be refreshed.</changelog>
  <changelog author="psimons@suse.com" date="1478260801">- Drop 50_bts284274_hardlinkreplace.dpatch. The --linkhard option
  added by this patch has an implementation bug that can cause data
  loss. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677419
  has more details.</changelog>
  <changelog author="psimons@suse.com" date="1480939200">- Upstream has changed their versioning scheme after version 1.51.
  Unfortunately, the new version 1.6.x won't be recognized as
  "newer" by zypper. This commit adds appropriate "provides" and
  "obsoletes" attributes to the spec file to remedy that issue.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- We cannot update from fdupes 1.51 to 1.6.1. That "downgrade"
  works okay'ish for Tumbleweed because we can replace the old
  package with the new one, but in SLE this is not possible. We
  asked upstream to please release a "2.0" version to remedy these
  issues (https://github.com/adrianlopezroche/fdupes/issues/74),
  but he does not respond. Therefore, we'll call this version 1.61,
  ignoring upstreams change in the versioning scheme.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="mcepl@suse.com" date="1587038400">- Make package building even on platforms, where _rpmmacrodir
  is not defined.</changelog>
  <changelog author="info@paolostivanin.com" date="1590148800">- Update to v2.0.0
  * Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  * Add --minsize option.
  * Add --maxsize option.
  * Add --time option.
  * Add --order=ctime option.
  * Add --log option.
  * Use configure script for installation (Autotools/Automake).
- Remove fdupes-makefile.patch</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Use noun phrase in summary. Drop old specfile constructs.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.1.2:
  * Do not enter ncurses mode when --immediate option given.
  * Fix logging/memory corruption bug when using --log with --immediate.
  * Break mtime ties using ctime when sorting by time.
  * Reduce number of calls to stat(), for speed.
  * Clear last command status when new command is entered.
  * Rename cs command ("clear all selections") from cs to csel.
  * Rename igs command ("invert selections") from igs to isel.
  * Add "prune" command as synonym for DELETE key.
  * Clear selections after deleting files via prune/DELETE.
  * Fix dependency issues when fdupes is configured to not use ncurses.
- build without ncurses for now until buildcycles can be solved</changelog>
  <changelog author="coolo@suse.com" date="1647086400">- Simplify macros.fdupes with a call to a C++ program that does
  the same within a fraction of a second what the shell loop did
  in many seconds (bsc#1195709)</changelog>
  <changelog author="coolo@suse.com" date="1647259200">- Handle symlinks (-s argument) correctly</changelog>
  <changelog author="coolo@suse.com" date="1647345600">- A more correct approach to creating symlinks (old bug actually):
  Do not link the files as given by fdupes, but turn them into
  relative links (it works by chance if given a buildroot, but
  fails if running on a subdirectory)
- Support multiple directories given (as glob to the macro)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1648814400">- Fixes for the new wrapper:
  * Order duplicates by name, to get a reproducible file set
    (boo#1197484).
  * Remove redundant order parameter from fdupes invocation.
  * Modernize code, significantly reduce allocations.
  * Exit immediately when mandatory parameters are missing.
  * Remove obsolete buildroot parameter
  * Add some tests for the wrapper</changelog>
  <changelog author="andrea.manzini@suse.com" date="1664712000">- update to 2.2.1:
  * Fix bug in code meant to skip over the current log file when --log option is given.
  * Updates to copyright notices in source code.
  * Add --deferconfirmation option.
  * Check that files marked as duplicates haven't changed during program execution before deleting them.
  * Update documentation to indicate units for SIZE in command-line options.
  * Move some configuration settings to configure.ac file.</changelog>
  <changelog author="mli@suse.com" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
</package>
<package pkgid="8a4cf4a123b911c8169fa9ba58b621872e90e3204fcbe3203e20e7d107bacc62" name="fdupes" arch="ppc64le">
  <version epoch="0" ver="2.3.0" rel="150400.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1419163200">- add -L (--linkhard) option
  add 50_bts284274_hardlinkreplace.dpatch</changelog>
  <changelog author="tchvatal@suse.com" date="1438603200">- Update to upstream git repo on github
- Refresh patches:
  * fdupes-makefile.patch
  * 0008-speedup-the-file-compare.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
  * 50_bts284274_hardlinkreplace.dpatch
- Upstreamed patch:
  * 0004-Large-file-support-for-2GB-files-bts447601.patch
- Remove whitespace from fdupes.macros file
- Cleanup with spec-cleaner
  - Obey rpm-opt-flags
  - run test phase</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- By default relink hardlinks too, should fix bnc#940296</changelog>
  <changelog author="psimons@suse.com" date="1478260800">- Update to version 1.6.1. The following patches have been applied
  upstream and were dropped:
  * 0001-restore-pristine-code.patch
  * 0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
  * 0003-Fix-a-typo-in-a-manpage-bts353789.patch
  * 0005-add-summarize-to-manpage-bts481809.patch
  * 0006-add-nohidden-support-bts511702.patch
  * 0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0008-speedup-the-file-compare.patch
  * 0009-glibc-endianness-check-in-md5.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
- 50_bts284274_hardlinkreplace.dpatch had to be refreshed.</changelog>
  <changelog author="psimons@suse.com" date="1478260801">- Drop 50_bts284274_hardlinkreplace.dpatch. The --linkhard option
  added by this patch has an implementation bug that can cause data
  loss. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677419
  has more details.</changelog>
  <changelog author="psimons@suse.com" date="1480939200">- Upstream has changed their versioning scheme after version 1.51.
  Unfortunately, the new version 1.6.x won't be recognized as
  "newer" by zypper. This commit adds appropriate "provides" and
  "obsoletes" attributes to the spec file to remedy that issue.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- We cannot update from fdupes 1.51 to 1.6.1. That "downgrade"
  works okay'ish for Tumbleweed because we can replace the old
  package with the new one, but in SLE this is not possible. We
  asked upstream to please release a "2.0" version to remedy these
  issues (https://github.com/adrianlopezroche/fdupes/issues/74),
  but he does not respond. Therefore, we'll call this version 1.61,
  ignoring upstreams change in the versioning scheme.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="mcepl@suse.com" date="1587038400">- Make package building even on platforms, where _rpmmacrodir
  is not defined.</changelog>
  <changelog author="info@paolostivanin.com" date="1590148800">- Update to v2.0.0
  * Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  * Add --minsize option.
  * Add --maxsize option.
  * Add --time option.
  * Add --order=ctime option.
  * Add --log option.
  * Use configure script for installation (Autotools/Automake).
- Remove fdupes-makefile.patch</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Use noun phrase in summary. Drop old specfile constructs.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.1.2:
  * Do not enter ncurses mode when --immediate option given.
  * Fix logging/memory corruption bug when using --log with --immediate.
  * Break mtime ties using ctime when sorting by time.
  * Reduce number of calls to stat(), for speed.
  * Clear last command status when new command is entered.
  * Rename cs command ("clear all selections") from cs to csel.
  * Rename igs command ("invert selections") from igs to isel.
  * Add "prune" command as synonym for DELETE key.
  * Clear selections after deleting files via prune/DELETE.
  * Fix dependency issues when fdupes is configured to not use ncurses.
- build without ncurses for now until buildcycles can be solved</changelog>
  <changelog author="coolo@suse.com" date="1647086400">- Simplify macros.fdupes with a call to a C++ program that does
  the same within a fraction of a second what the shell loop did
  in many seconds (bsc#1195709)</changelog>
  <changelog author="coolo@suse.com" date="1647259200">- Handle symlinks (-s argument) correctly</changelog>
  <changelog author="coolo@suse.com" date="1647345600">- A more correct approach to creating symlinks (old bug actually):
  Do not link the files as given by fdupes, but turn them into
  relative links (it works by chance if given a buildroot, but
  fails if running on a subdirectory)
- Support multiple directories given (as glob to the macro)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1648814400">- Fixes for the new wrapper:
  * Order duplicates by name, to get a reproducible file set
    (boo#1197484).
  * Remove redundant order parameter from fdupes invocation.
  * Modernize code, significantly reduce allocations.
  * Exit immediately when mandatory parameters are missing.
  * Remove obsolete buildroot parameter
  * Add some tests for the wrapper</changelog>
  <changelog author="andrea.manzini@suse.com" date="1664712000">- update to 2.2.1:
  * Fix bug in code meant to skip over the current log file when --log option is given.
  * Updates to copyright notices in source code.
  * Add --deferconfirmation option.
  * Check that files marked as duplicates haven't changed during program execution before deleting them.
  * Update documentation to indicate units for SIZE in command-line options.
  * Move some configuration settings to configure.ac file.</changelog>
  <changelog author="mli@suse.com" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
</package>
<package pkgid="e6c83a50422017eca5b0c014f81ec4291d6e97ba25d3d41ae8430ca59b45f84a" name="fdupes" arch="s390x">
  <version epoch="0" ver="2.3.0" rel="150400.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1419163200">- add -L (--linkhard) option
  add 50_bts284274_hardlinkreplace.dpatch</changelog>
  <changelog author="tchvatal@suse.com" date="1438603200">- Update to upstream git repo on github
- Refresh patches:
  * fdupes-makefile.patch
  * 0008-speedup-the-file-compare.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
  * 50_bts284274_hardlinkreplace.dpatch
- Upstreamed patch:
  * 0004-Large-file-support-for-2GB-files-bts447601.patch
- Remove whitespace from fdupes.macros file
- Cleanup with spec-cleaner
  - Obey rpm-opt-flags
  - run test phase</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- By default relink hardlinks too, should fix bnc#940296</changelog>
  <changelog author="psimons@suse.com" date="1478260800">- Update to version 1.6.1. The following patches have been applied
  upstream and were dropped:
  * 0001-restore-pristine-code.patch
  * 0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
  * 0003-Fix-a-typo-in-a-manpage-bts353789.patch
  * 0005-add-summarize-to-manpage-bts481809.patch
  * 0006-add-nohidden-support-bts511702.patch
  * 0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0008-speedup-the-file-compare.patch
  * 0009-glibc-endianness-check-in-md5.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
- 50_bts284274_hardlinkreplace.dpatch had to be refreshed.</changelog>
  <changelog author="psimons@suse.com" date="1478260801">- Drop 50_bts284274_hardlinkreplace.dpatch. The --linkhard option
  added by this patch has an implementation bug that can cause data
  loss. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677419
  has more details.</changelog>
  <changelog author="psimons@suse.com" date="1480939200">- Upstream has changed their versioning scheme after version 1.51.
  Unfortunately, the new version 1.6.x won't be recognized as
  "newer" by zypper. This commit adds appropriate "provides" and
  "obsoletes" attributes to the spec file to remedy that issue.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- We cannot update from fdupes 1.51 to 1.6.1. That "downgrade"
  works okay'ish for Tumbleweed because we can replace the old
  package with the new one, but in SLE this is not possible. We
  asked upstream to please release a "2.0" version to remedy these
  issues (https://github.com/adrianlopezroche/fdupes/issues/74),
  but he does not respond. Therefore, we'll call this version 1.61,
  ignoring upstreams change in the versioning scheme.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="mcepl@suse.com" date="1587038400">- Make package building even on platforms, where _rpmmacrodir
  is not defined.</changelog>
  <changelog author="info@paolostivanin.com" date="1590148800">- Update to v2.0.0
  * Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  * Add --minsize option.
  * Add --maxsize option.
  * Add --time option.
  * Add --order=ctime option.
  * Add --log option.
  * Use configure script for installation (Autotools/Automake).
- Remove fdupes-makefile.patch</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Use noun phrase in summary. Drop old specfile constructs.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.1.2:
  * Do not enter ncurses mode when --immediate option given.
  * Fix logging/memory corruption bug when using --log with --immediate.
  * Break mtime ties using ctime when sorting by time.
  * Reduce number of calls to stat(), for speed.
  * Clear last command status when new command is entered.
  * Rename cs command ("clear all selections") from cs to csel.
  * Rename igs command ("invert selections") from igs to isel.
  * Add "prune" command as synonym for DELETE key.
  * Clear selections after deleting files via prune/DELETE.
  * Fix dependency issues when fdupes is configured to not use ncurses.
- build without ncurses for now until buildcycles can be solved</changelog>
  <changelog author="coolo@suse.com" date="1647086400">- Simplify macros.fdupes with a call to a C++ program that does
  the same within a fraction of a second what the shell loop did
  in many seconds (bsc#1195709)</changelog>
  <changelog author="coolo@suse.com" date="1647259200">- Handle symlinks (-s argument) correctly</changelog>
  <changelog author="coolo@suse.com" date="1647345600">- A more correct approach to creating symlinks (old bug actually):
  Do not link the files as given by fdupes, but turn them into
  relative links (it works by chance if given a buildroot, but
  fails if running on a subdirectory)
- Support multiple directories given (as glob to the macro)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1648814400">- Fixes for the new wrapper:
  * Order duplicates by name, to get a reproducible file set
    (boo#1197484).
  * Remove redundant order parameter from fdupes invocation.
  * Modernize code, significantly reduce allocations.
  * Exit immediately when mandatory parameters are missing.
  * Remove obsolete buildroot parameter
  * Add some tests for the wrapper</changelog>
  <changelog author="andrea.manzini@suse.com" date="1664712000">- update to 2.2.1:
  * Fix bug in code meant to skip over the current log file when --log option is given.
  * Updates to copyright notices in source code.
  * Add --deferconfirmation option.
  * Check that files marked as duplicates haven't changed during program execution before deleting them.
  * Update documentation to indicate units for SIZE in command-line options.
  * Move some configuration settings to configure.ac file.</changelog>
  <changelog author="mli@suse.com" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
</package>
<package pkgid="95ead61ae2d4b8bcf8af89e2d85bd2b0207ed5782558aae86371e91243095b36" name="fdupes" arch="src">
  <version epoch="0" ver="2.3.0" rel="150400.3.3.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1398772800">- sort the output of fdupes by filename to make it deterministic
  for parallel builds
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1419163200">- add -L (--linkhard) option
  add 50_bts284274_hardlinkreplace.dpatch</changelog>
  <changelog author="tchvatal@suse.com" date="1438603200">- Update to upstream git repo on github
- Refresh patches:
  * fdupes-makefile.patch
  * 0008-speedup-the-file-compare.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
  * 50_bts284274_hardlinkreplace.dpatch
- Upstreamed patch:
  * 0004-Large-file-support-for-2GB-files-bts447601.patch
- Remove whitespace from fdupes.macros file
- Cleanup with spec-cleaner
  - Obey rpm-opt-flags
  - run test phase</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- By default relink hardlinks too, should fix bnc#940296</changelog>
  <changelog author="psimons@suse.com" date="1478260800">- Update to version 1.6.1. The following patches have been applied
  upstream and were dropped:
  * 0001-restore-pristine-code.patch
  * 0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
  * 0003-Fix-a-typo-in-a-manpage-bts353789.patch
  * 0005-add-summarize-to-manpage-bts481809.patch
  * 0006-add-nohidden-support-bts511702.patch
  * 0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0008-speedup-the-file-compare.patch
  * 0009-glibc-endianness-check-in-md5.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
- 50_bts284274_hardlinkreplace.dpatch had to be refreshed.</changelog>
  <changelog author="psimons@suse.com" date="1478260801">- Drop 50_bts284274_hardlinkreplace.dpatch. The --linkhard option
  added by this patch has an implementation bug that can cause data
  loss. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677419
  has more details.</changelog>
  <changelog author="psimons@suse.com" date="1480939200">- Upstream has changed their versioning scheme after version 1.51.
  Unfortunately, the new version 1.6.x won't be recognized as
  "newer" by zypper. This commit adds appropriate "provides" and
  "obsoletes" attributes to the spec file to remedy that issue.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- We cannot update from fdupes 1.51 to 1.6.1. That "downgrade"
  works okay'ish for Tumbleweed because we can replace the old
  package with the new one, but in SLE this is not possible. We
  asked upstream to please release a "2.0" version to remedy these
  issues (https://github.com/adrianlopezroche/fdupes/issues/74),
  but he does not respond. Therefore, we'll call this version 1.61,
  ignoring upstreams change in the versioning scheme.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="mcepl@suse.com" date="1587038400">- Make package building even on platforms, where _rpmmacrodir
  is not defined.</changelog>
  <changelog author="info@paolostivanin.com" date="1590148800">- Update to v2.0.0
  * Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  * Add --minsize option.
  * Add --maxsize option.
  * Add --time option.
  * Add --order=ctime option.
  * Add --log option.
  * Use configure script for installation (Autotools/Automake).
- Remove fdupes-makefile.patch</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Use noun phrase in summary. Drop old specfile constructs.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.1.2:
  * Do not enter ncurses mode when --immediate option given.
  * Fix logging/memory corruption bug when using --log with --immediate.
  * Break mtime ties using ctime when sorting by time.
  * Reduce number of calls to stat(), for speed.
  * Clear last command status when new command is entered.
  * Rename cs command ("clear all selections") from cs to csel.
  * Rename igs command ("invert selections") from igs to isel.
  * Add "prune" command as synonym for DELETE key.
  * Clear selections after deleting files via prune/DELETE.
  * Fix dependency issues when fdupes is configured to not use ncurses.
- build without ncurses for now until buildcycles can be solved</changelog>
  <changelog author="coolo@suse.com" date="1647086400">- Simplify macros.fdupes with a call to a C++ program that does
  the same within a fraction of a second what the shell loop did
  in many seconds (bsc#1195709)</changelog>
  <changelog author="coolo@suse.com" date="1647259200">- Handle symlinks (-s argument) correctly</changelog>
  <changelog author="coolo@suse.com" date="1647345600">- A more correct approach to creating symlinks (old bug actually):
  Do not link the files as given by fdupes, but turn them into
  relative links (it works by chance if given a buildroot, but
  fails if running on a subdirectory)
- Support multiple directories given (as glob to the macro)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1648814400">- Fixes for the new wrapper:
  * Order duplicates by name, to get a reproducible file set
    (boo#1197484).
  * Remove redundant order parameter from fdupes invocation.
  * Modernize code, significantly reduce allocations.
  * Exit immediately when mandatory parameters are missing.
  * Remove obsolete buildroot parameter
  * Add some tests for the wrapper</changelog>
  <changelog author="andrea.manzini@suse.com" date="1664712000">- update to 2.2.1:
  * Fix bug in code meant to skip over the current log file when --log option is given.
  * Updates to copyright notices in source code.
  * Add --deferconfirmation option.
  * Check that files marked as duplicates haven't changed during program execution before deleting them.
  * Update documentation to indicate units for SIZE in command-line options.
  * Move some configuration settings to configure.ac file.</changelog>
  <changelog author="mli@suse.com" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
</package>
<package pkgid="dceac73490031613f9cf3dbd9740060a1b3ad14c23f2767cdc7b5a383fe0339e" name="fdupes" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="150400.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1419163200">- add -L (--linkhard) option
  add 50_bts284274_hardlinkreplace.dpatch</changelog>
  <changelog author="tchvatal@suse.com" date="1438603200">- Update to upstream git repo on github
- Refresh patches:
  * fdupes-makefile.patch
  * 0008-speedup-the-file-compare.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
  * 50_bts284274_hardlinkreplace.dpatch
- Upstreamed patch:
  * 0004-Large-file-support-for-2GB-files-bts447601.patch
- Remove whitespace from fdupes.macros file
- Cleanup with spec-cleaner
  - Obey rpm-opt-flags
  - run test phase</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- By default relink hardlinks too, should fix bnc#940296</changelog>
  <changelog author="psimons@suse.com" date="1478260800">- Update to version 1.6.1. The following patches have been applied
  upstream and were dropped:
  * 0001-restore-pristine-code.patch
  * 0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
  * 0003-Fix-a-typo-in-a-manpage-bts353789.patch
  * 0005-add-summarize-to-manpage-bts481809.patch
  * 0006-add-nohidden-support-bts511702.patch
  * 0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0008-speedup-the-file-compare.patch
  * 0009-glibc-endianness-check-in-md5.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
- 50_bts284274_hardlinkreplace.dpatch had to be refreshed.</changelog>
  <changelog author="psimons@suse.com" date="1478260801">- Drop 50_bts284274_hardlinkreplace.dpatch. The --linkhard option
  added by this patch has an implementation bug that can cause data
  loss. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677419
  has more details.</changelog>
  <changelog author="psimons@suse.com" date="1480939200">- Upstream has changed their versioning scheme after version 1.51.
  Unfortunately, the new version 1.6.x won't be recognized as
  "newer" by zypper. This commit adds appropriate "provides" and
  "obsoletes" attributes to the spec file to remedy that issue.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- We cannot update from fdupes 1.51 to 1.6.1. That "downgrade"
  works okay'ish for Tumbleweed because we can replace the old
  package with the new one, but in SLE this is not possible. We
  asked upstream to please release a "2.0" version to remedy these
  issues (https://github.com/adrianlopezroche/fdupes/issues/74),
  but he does not respond. Therefore, we'll call this version 1.61,
  ignoring upstreams change in the versioning scheme.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="mcepl@suse.com" date="1587038400">- Make package building even on platforms, where _rpmmacrodir
  is not defined.</changelog>
  <changelog author="info@paolostivanin.com" date="1590148800">- Update to v2.0.0
  * Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  * Add --minsize option.
  * Add --maxsize option.
  * Add --time option.
  * Add --order=ctime option.
  * Add --log option.
  * Use configure script for installation (Autotools/Automake).
- Remove fdupes-makefile.patch</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Use noun phrase in summary. Drop old specfile constructs.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.1.2:
  * Do not enter ncurses mode when --immediate option given.
  * Fix logging/memory corruption bug when using --log with --immediate.
  * Break mtime ties using ctime when sorting by time.
  * Reduce number of calls to stat(), for speed.
  * Clear last command status when new command is entered.
  * Rename cs command ("clear all selections") from cs to csel.
  * Rename igs command ("invert selections") from igs to isel.
  * Add "prune" command as synonym for DELETE key.
  * Clear selections after deleting files via prune/DELETE.
  * Fix dependency issues when fdupes is configured to not use ncurses.
- build without ncurses for now until buildcycles can be solved</changelog>
  <changelog author="coolo@suse.com" date="1647086400">- Simplify macros.fdupes with a call to a C++ program that does
  the same within a fraction of a second what the shell loop did
  in many seconds (bsc#1195709)</changelog>
  <changelog author="coolo@suse.com" date="1647259200">- Handle symlinks (-s argument) correctly</changelog>
  <changelog author="coolo@suse.com" date="1647345600">- A more correct approach to creating symlinks (old bug actually):
  Do not link the files as given by fdupes, but turn them into
  relative links (it works by chance if given a buildroot, but
  fails if running on a subdirectory)
- Support multiple directories given (as glob to the macro)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1648814400">- Fixes for the new wrapper:
  * Order duplicates by name, to get a reproducible file set
    (boo#1197484).
  * Remove redundant order parameter from fdupes invocation.
  * Modernize code, significantly reduce allocations.
  * Exit immediately when mandatory parameters are missing.
  * Remove obsolete buildroot parameter
  * Add some tests for the wrapper</changelog>
  <changelog author="andrea.manzini@suse.com" date="1664712000">- update to 2.2.1:
  * Fix bug in code meant to skip over the current log file when --log option is given.
  * Updates to copyright notices in source code.
  * Add --deferconfirmation option.
  * Check that files marked as duplicates haven't changed during program execution before deleting them.
  * Update documentation to indicate units for SIZE in command-line options.
  * Move some configuration settings to configure.ac file.</changelog>
  <changelog author="mli@suse.com" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
</package>
<package pkgid="08ab69f6dbdc0dcb7c40a71b33db3b0b4ca7be90ba29447f63a4d9572f2404c4" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="79be71c428522fb56971c38a22c3937b5bdd1df9bd0b3a659195a05d6d00c8fa" name="ffmpeg" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="cd6a553f8658e19aa453eca884b1c02c6c81e1304f2c9659c533e1c15908ffa8" name="ffmpeg" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="7a19c697696273e7820a2f365b08d2b2335bdedf01fa04d96388a1ee9edf1aaa" name="ffmpeg" arch="src">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="d9d642b8f73894e7388de9c28f368e0ea25e3d6b22ef49cd595359a13f635ce9" name="ffmpeg" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="8344ff75f26fdc9ffe5fcd57b18b665a935a36d67ea33ef6a2c77109d4960755" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8c735545ddd57225402fd73f42fa76641f947f925b1f32f7ae949fe364c144c8" name="ffmpeg" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="653e69fd4bb0af1ced9d7747540f433b3ee59d34453bc2d5b23cd58bcb63e431" name="ffmpeg" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="0a5f03ad799d87b07515a13ccc37f713b557a1bad209b8edc2161841dddabf2a" name="ffmpeg" arch="src">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="7b9327984b41148f8925f4e4eba28ec8e9f27d7c2e7c6ad9b4b02693b888e018" name="ffmpeg" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="d6192727809874fd60aa5fd6de51e404014281455df043126d8a2ea7b928a197" name="ffmpeg-4" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="aa35769cd9cfb2506316f24eb342e33881c6d15befb04c96a5ea1810959c3d8d" name="ffmpeg-4" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="7a4a306e5bca1f29b4653615c0e266fc137ce9e824329553c331a9c1e64745d3" name="ffmpeg-4" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="0218d9210c24e0815d1004b4e780d5005d7a9e547220eac09bbf660a696a9771" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="c98546f71109505124410ec558c8cd004a2ae8595f64edc37cf2f23bed6bf10f" name="ffmpeg-4" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="1e024ab9cba875c57788bd4716e2f13afab1f3dd67f27a4d128980e941cdf7cb" name="ffmpeg-4-libavcodec-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="49ebb3f008b391659a33876f83f793fd519c60296630e5a5f16841834f30087d" name="ffmpeg-4-libavcodec-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="52e1565b40dccf47ee93e17c3ea313d5b53a0ba0667a8d8995b64cf57158cbed" name="ffmpeg-4-libavcodec-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="abfc95c36d4c436601dcf27a2b95abbeb36a8e0bb1fce41dfd573164d61d7e78" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="9d0ee48ad421014ae058369f8fdc57fc8f17be0543e05c13e96686785f1dd2b3" name="ffmpeg-4-libavdevice-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="44a5811d4dc915a9e83b53f6207b8bab4343f419d384738ef1b93e4342bff118" name="ffmpeg-4-libavdevice-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="68c7903ad0a5dabc65a994f81ac4c01906478a9f8fe13b662d7af0fd3171d40d" name="ffmpeg-4-libavdevice-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="0cfce158e26161b157419e475c1b0d16f43fb403fef369b8b857c0dea5fb13f7" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="858687b9c23220f06be39fd7b130b4a2f26ac1c6c7b3deda99a5b99dd855d951" name="ffmpeg-4-libavfilter-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="4d8408e5902391938a8754aeebb7cf46a22243a4c0681e91fc11a449ff7605c8" name="ffmpeg-4-libavfilter-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="67c9f825b452c08c8a814b76e90a448e1f48f1871b4023138f1b4b04a3452819" name="ffmpeg-4-libavfilter-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="60a508a0c39f84fc6c02fadac13a113603b4d6ce1bab3411ec483871e2e2b5db" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="812bd29df2e056572de022e86b3b0416157e70e55d277d07e54bf74ff0b5c0be" name="ffmpeg-4-libavformat-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8464fa3ee1d272859617d5febee618003e9bb37dbef169cf1c3815ad80bb2d87" name="ffmpeg-4-libavformat-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="dcff3900a6b70141189299ca2a769929c9c81166d706e0186e7d6b26bc0d40d0" name="ffmpeg-4-libavformat-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="bd873e59bf73d1cfe4189e76668e1e54435ce583c846e4a9ffadd32fd389ab67" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="38724db8601f1ee1866029ab1177969eb8346794883a199902fcdbbb3020096b" name="ffmpeg-4-libavresample-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="516584f0e3e5f8b7a2e8cab55b3472a4ca068c33f64af32af814e354de66f86d" name="ffmpeg-4-libavresample-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="53b9c8b7523b5aadac17e6261e142c16fd1947dee5fef6bd61e70eb98b2dba99" name="ffmpeg-4-libavresample-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="3fd1d772739235cac9a0840c8458d68d960d4c67f72a0ac7286fbc0c722125e3" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="e63a1a91e8cb7a2337eaba7907ed3d173089b4fb40e9f0a375a210d9c6302f5b" name="ffmpeg-4-libavutil-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8635824a601af9a57416a75c5fde07ecf821c79f8e00aa82d917172415ce4d60" name="ffmpeg-4-libavutil-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="101bc89c0dac0f6bf662d7263dde9208cdfd42d1f868dc16c20f34b584870200" name="ffmpeg-4-libavutil-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="65b20eb88473554703d2a7b7dbe8717432a8fbfe01d60060b640766196e93be1" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="ee8e58326acbb8e0e9c5ecdbc0da95d0e8b65e3a30d13d1daca50c43d4ed7917" name="ffmpeg-4-libpostproc-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8b4fdda90173e2d1fa6d327469b75dfcc8a9fbbabb164f020639db2ec62227d4" name="ffmpeg-4-libpostproc-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="7c6c4e0506be566cc5475ea32980a0bdad1d8bb600e9eb18b99f5e4f0a752ad6" name="ffmpeg-4-libpostproc-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="82c4782ae6b48922051a89ede69dcb378e95b158e8c5337a7896494c9046a503" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="78a78664f423113acaa153e8ba2af8a605abb1161ee509400f5d80927967b61d" name="ffmpeg-4-libswresample-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="a2ed549dd0b64c47addfc024155ea2c14a44a874fe7f2131baee6ea55edbf396" name="ffmpeg-4-libswresample-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="e8dd191b589c25bb66e62eafcb19ed6cdc56ea39a08a96e7047084b267a060a8" name="ffmpeg-4-libswresample-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="996f60763524615e107a83c48084c0d7e906fe74658249ba6a20e64c66c8b7d9" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="12c26eed72bd3ad8843efdde6c174b480add4e344e428ec883671d6083abb4c1" name="ffmpeg-4-libswscale-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="61b1f569c709225a81047954ae3ba270a5cb9f2c3305019ac18c935739c8a64b" name="ffmpeg-4-libswscale-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8d773bb5db52fa4eacfcd3bfe6ec6aa1eb7dafe7f9da3c0713a6d4a20b1500f5" name="ffmpeg-4-libswscale-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="54dc7b7d8823692582f47fae3fff173cce7c099adae7294392116a2e10020d1c" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="b4af5bc18fa6bef94e62de56c40fe4c6a2a4917ca7d157d70b75f56b9bd4819c" name="ffmpeg-4-private-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="7db007dcb79927f4c239961f012a31e404f3258b132c44ddd14d7b406dda5802" name="ffmpeg-4-private-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="4c292900030f6e0b73f4c7438d92a90ae07c11a9d786730f17b95405b65ead20" name="ffmpeg-4-private-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="621c0d884160eccb15aa21b1449aab161f9d7e4c00e867cc2161b8e17cde1718" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="86679c127f09eb7ca4827fea5663bb930deca2bc2234aa488d2cd93e05fcb856" name="ffmpeg-private-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="9568e4217a0cbf37c807b1c8f811209545c33faa2510b880bca5dec977e5866b" name="ffmpeg-private-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="572ddb3078aaf8d5b83ddee8f4fe344cc46bacda94e604454ab3aba040cc4beb" name="ffmpeg-private-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="c7ba4e82030d65c7a2275eb0bd099c9e3cf60f500305d99e2ebebebba5de1364" name="ffmpeg-private-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="95c3c46b9afbecaa72374775abe072f6471c3db03ef7c07276bbd585695998e8" name="ffmpeg-private-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="f6311cc06eec14e7fd41a33e44b97a30fde44fd4abdda6ba904f30f56351eded" name="ffmpeg-private-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="952c513e88d9beec101e933d95bad720f90b9c409973face99e94e1d6cb82128" name="ffmpeg-private-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="1c81fcd688ccaece01a4fc23c9212382ca306044cd7fa4f0dfbaab4e1573fff7" name="ffmpeg-private-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="623f7e55764c5cf9fb9fee46a5fa47b997c2c816f9017b8d6611cc710f1da27e" name="frr" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="a59661b5815e9dbe643dad1b2619c83b51f2dce97cda1383a1ee660d0f5d9c0e" name="frr" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="fcc601f6b2fe6f43dea17ce6053226774acb07baa1e2138dde28a744177c4c90" name="frr" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="d8803af814b34286de4e157732dc1269b2b90182586a6aa38184e69fab4c2d04" name="frr" arch="src">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="e263765e782b9cfc53589829fce1abe84f323cb77f0381e854b5838fd0161bba" name="frr" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="09fe360ccfad199bf9e798f8b3064f2f5c4110ee58b623908782c8bde62eae5f" name="frr-devel" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="dd77b9ad10f60f60ffffc818606e956cd22ffaa7f0422eb8318669f7606a7ceb" name="frr-devel" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="36e32ba2dc3c4a880cf11db94518e0386f96467af57321ba783b82578a82d22b" name="frr-devel" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="143650fea0189934d04bce7dbdb4c2ec2a547efdf19ebb8a6ef1a4815f5edf29" name="frr-devel" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="e5b58c711044805f93652454508bff5d1d821071c9ff0c2ee9ce2d2d2352204e" name="fuse2fs" arch="aarch64">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="264e094a7824ac4e69454440ddd5ca9d698ba4b402c1d4ede8b1d363ddad783d" name="fuse2fs" arch="ppc64le">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="66e51a823bb0199108d327c202ecc6c2b377e13daa1eccb20999610ff40c9af5" name="fuse2fs" arch="s390x">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="93d13614a1ed2de5c3298abf87bd50a6e69821136adeafafeec53694660e5bc8" name="fuse2fs" arch="src">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="d060f273884892e35323b414502d02f144376797fe1299274127e51950d514ca" name="fuse2fs" arch="x86_64">
  <version epoch="0" ver="1.47.0" rel="150600.4.3.2"/>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="jack@suse.cz" date="1698840000">- mke2fs-Drop-metadata_csum_seed-and-orphan_file-from-.patch: Update
  mke2fs.conf to create filesystems only with features supported
  by tools in SLE15-SP4/5 by default.</changelog>
  <changelog author="jack@suse.cz" date="1700654400">- libext2fs-add-sanity-check-to-extent-manipulation.patch: Merged upstream
  in 1.46.6
- References to old bugs fixed by updating to latest upstream version:
  CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304
  bsc#1009532 bsc#1038194 bsc#1128383 bsc#1145716 bsc#1152101 bsc#1154295
  bsc#1160571 bsc#1160979 bsc#1170964 bsc#1183791 bsc#1198446 bsc#915402
  bsc#918346 bsc#960273</changelog>
  <changelog author="jack@suse.cz" date="1705320000">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress
  "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="jack@suse.cz" date="1717675200">- EA Inode handling fixes:
  - e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
    checks for ea inode consistency (bsc#1223596)
  - e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output
    of several tests (bsc#1223596)</changelog>
</package>
<package pkgid="e0667598e93deaa9cb0623c9f70e2d2751c613cee1934961e2bd6a0bc1a09c8a" name="fwupdate" arch="aarch64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="210749fd7364c8e4cd3ccba9f47d9bda4c5c94442888b3d4abfca39249350571" name="fwupdate" arch="src">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="69b490385c8c73e29341a6e025f14138fe2c67821f43bec82a270f048c2ce685" name="fwupdate" arch="x86_64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="3f3dca9e5bf23c6bca311941054d8401c1c786a949c742f9c09de05e150694c8" name="fwupdate-devel" arch="aarch64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="1cc53228b8556ac1727200114c29283273365c233b1f0bb1f3f48c4cf4f65cca" name="fwupdate-devel" arch="x86_64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="81d6f0a13d6f145ff9c924924d0ee433b14993335a802d5b1f4fb28d3171aecd" name="fwupdate-efi" arch="aarch64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="386735e3cdd811477eeeed376597d9a01f20aa7c4fc3a1ecae63354c6ee3e40c" name="fwupdate-efi" arch="x86_64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="bc3661cde53162c6dead16d0c37c1fd8b0da4c236868df0468b8a5f4b0975d9a" name="gcc13" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="a42a7398d40db58f9767e50d5fb186ccd072dd6e4eac2598ddb5b03e6ca6d87f" name="gcc13" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="a3756c53b2cd875ac7557da4e6513919deac2d7a7440df770589a9387a8a052b" name="gcc13" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="a77df9b193a2df695b9b0c5bdd804c035f79c407fc9ca8894329318e51bbe462" name="gcc13" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="336c31dd8af004a157089fa8abd91d76ea968e45e8dc55fbed1351fa33dd0872" name="gcc13" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="e907c9c7856d1130fa82add3cf0b2be37aa93f012ddf5cb0727ebc48f0ddeb18" name="gcc13-32bit" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="87b12dd53c0b68cf7bb81b49dbba9e90fb3f31628b6f53d42dea3f625d350a6e" name="gcc13-32bit" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="4f96a9934d3eb7de66adc67e023ceb65a90e8b6fa15bd8beb4fdabaccad23771" name="gcc13-PIE" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="528a33ca501123160c7b09a499b5347ec8716d3aa81eb1805a22615b892f9afa" name="gcc13-PIE" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c431a13574f9802a9678c9c89a0084d7282246bde3cea7929352fa9fd9eeb91b" name="gcc13-PIE" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="3c58cf0ce11f1961ffc61abd10d0541820314c4c2b4249c9a7fedd275d996f46" name="gcc13-PIE" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="3a19967224e8da8867efe361e6a1557879cb22d0b124b6041d3a7a5359520cc0" name="gcc13-ada" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="8d3167ef15863094d5429000de6882dbc8b339b0cc9eb5c45670189d399c0c1e" name="gcc13-ada" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="37c9e1ffd8730e7d9994f99a811a11267f94f36964223c46d21b22eb729effde" name="gcc13-ada" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="cd6ec22801d6c1d7ea152a777ecf21606a49fe3d4e39fbf91e1390086ea0af6f" name="gcc13-ada" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="f71087a93eff08f2ca109ee3c6a12f984f16d814c315c4ab67bc8f44fc089173" name="gcc13-ada-32bit" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="5e5fcc738594983d84507f1807d3afd499048fef7e3343e98e8d2c5c973a08de" name="gcc13-ada-32bit" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="0075940a061f118475477244e81ac2c73392b4c46863f8ab5aec3156370b1298" name="gcc13-c++" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="ef96cdd9855640564d26676aeaea62dded41490738e8956a49f291cc0a4e6638" name="gcc13-c++" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="1f8b998b1153fd69e2e93ddd7703404798c71b30cef2686988f2586080f5c2de" name="gcc13-c++" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="ced5175457465369ed3341990aca27d83582d2e7b476ef8edc7393afda2ce2d9" name="gcc13-c++" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b655301470ecb36a4112b189f33192a2325d9f485f7a3f1979045e3fd8d0f960" name="gcc13-c++-32bit" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="6c449624e5989df9047b88fbc0069958d760197309721862467a27f7e6d790b2" name="gcc13-c++-32bit" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="fe46822301387f198fd2c7c4baacacc1d530b309e09de1fe298ba359cbec4205" name="gcc13-d" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c759562017adbb4e1cdc681d2ef6aa58e756ce45c8c0c388711e480036c74636" name="gcc13-d" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="9eafcd12d3b93e5fe27a966cd52b86c0c9757d7159c60dbc559cb4a5eac2181f" name="gcc13-d" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="ead7cf840640cdf9548280ba5b00b80711b82d184d2ab3a358c54e38fa94ec2a" name="gcc13-d-32bit" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="711004b74d036c220f2b50da3edc119f5b4043849b5a0a9386ebe48526054d19" name="gcc13-d-32bit" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="ea5c33f31ff89e0019b481e7315664765cc070a70b984f1801d52ea2ff48867d" name="gcc13-fortran" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="552ae385688a55a17ec1fd8e3e8b438fe659039575769e50b5ff827974263a0b" name="gcc13-fortran" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="638c4653b84a0c00217bb5b57fe7c2557705b8002098e5c934073eccfa9c6dc3" name="gcc13-fortran" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="02e8b52d68b1b370de67d0d78614b63cafb92b95b6a65b8dbb35de2e809e4b77" name="gcc13-fortran" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="420baee2cbe7c14a1ce303cc903ceeb72149eb79d56939d2358166ee1db1f0b8" name="gcc13-fortran-32bit" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c519ed37f4ee4d35525156a7672e1e6059415ab5bbc8e36513bd712a27ffcc3b" name="gcc13-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="20d7e2881720f91a23684cb3930172883be510af10ff40eed22d0dfcffc31d71" name="gcc13-go" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="ee2ec052fb48f28bc5f246f2a802795152aad2cf0040bf79457350f2ae960264" name="gcc13-go" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="dc5d1d6f1f51162d1d31826ba2d30f96501f2cbb8843d9c33a0003df4752d51d" name="gcc13-go" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="e777ea77b6b764059fc6c4cadcc9556cd608307d8af17c4c54e847e211587c50" name="gcc13-go" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="296faefba770c545e0f9156489711c430d5efb352b3cd3fed7fd51047363064a" name="gcc13-go-32bit" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="6d062f7187e8a767b163dbabf8022a6a6e9839aa5664b91c06b5d66fb6ddba22" name="gcc13-go-32bit" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="e3c569ab4ecb0b147922b50d35decd4f22e2435e260e88eadff01cf3a540bfc5" name="gcc13-info" arch="noarch">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="885d8188aad62cf6a64426ac6dd8e7edae25a1de712d8cb75f0a56c8fce33e8b" name="gcc13-locale" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="34f97cac28c68203a16bea490ac942bf12a5f174036c41625769c9ad69f0469a" name="gcc13-locale" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="74c06bd4d934af1e3c2a80e371d14b0343a8e365f17163f901b8bdc4eb271603" name="gcc13-locale" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="f6707da45ea6a3075fc30dc0d07d41211e6e06346ec29d4fc4fef2173dde0abe" name="gcc13-locale" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c80ca2c4ce156a2688b43a15b8ea9b48a293e08f2ca3722b53fb5b47f5bebc68" name="gcc13-m2" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="77a2d3d0b01972de78c050bc7737f4cb6f6ac8d12382931e8192631a13f57b07" name="gcc13-m2" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="74598b8ed00ce6cf2f8c72a8b9a41bf49c8692bdbcd0ecc5f9736d90553eb8e6" name="gcc13-m2" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="913425e8324aa88ea536ab60f8cda733fc729c3fad4ebd5160b061ed9e7f4774" name="gcc13-m2" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="c8bf2315a11bb460c20f181b66b20f1c9f3a0f1a6f45577e55c75a8205cb1859" name="gcc13-m2-32bit" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="58adcea7784f56bb999c9114409c35b3b3e482ee8285a83f71d86573fc756cfb" name="gcc13-m2-32bit" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b18fd4c2e909d8d19bcc991b9ce3fb26d4b5d0794a05f09b39a9de583b7cba21" name="gcc13-obj-c++" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="06ea5116504fb59147a594a8c68ff4f7e5cc30a37b66becdb092ed4d3cdebe6b" name="gcc13-obj-c++" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="1099aa48a168bdece0cd7491e6eab94d3bed083f3961084ff77e92ad7fadafcc" name="gcc13-obj-c++" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="9f96b2250d271bd42f9e2df9d75f19043df698cad56b224bb30b868ed7c23dbb" name="gcc13-obj-c++" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b0cf660ad94079ba10927cb87e5f5223d519b8c6da9cfe56e83044893346ad39" name="gcc13-obj-c++-32bit" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="dc6321a4ef65972fe5bc7ac6b54ffd240a12efb87c20eb606f7d260c5f0cef85" name="gcc13-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="a6a1fbdbacd216072f4d65bd66f4fe3d7a12f716b990863824460b91575c198a" name="gcc13-objc" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="ac21fb1aa194fc2211c95b132766f6b8101725c35d55f975164b90393a979969" name="gcc13-objc" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="ac6cebc5f86c51a3b221b5b1589bdf0e0725c3c938faf9893dfa648f851a5c1e" name="gcc13-objc" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="912d562b3012aae842c06185764cb2aa7a312879aac1521621030dffe40e66c8" name="gcc13-objc" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="41ad7ad6aadf0a48eb81148fcac0c1f52785e95b770b26054cbb3842d5909977" name="gcc13-objc-32bit" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="3324be04a8eb201a657353fdea36a2b6d67f3f2608a0408753a740e28ed75df1" name="gcc13-objc-32bit" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="d2f3960dce146665f6a2d38151514d6d390841529dc18aeea6f23801f6b65b08" name="gcc13-testresults" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="0ca9bf313ff8c411ef0cbadbb7effd4544d89b4ab12899fcff175890ddf981e2" name="gcc13-testresults" arch="ppc64le">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="b65c5e7779c54193db1d40ddb5ba816b479faad5099bef519722d809d7dd03a6" name="gcc13-testresults" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="ff1e781f6c386e5fc7334616a9a3e991a2e38d7b642008c6026d7c355b857bc2" name="gcc13-testresults" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="92da26d0e6ca587315bec554c69e51144a3397a9bd2cd8d3b79473e20178ef02" name="gcc13-testresults" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="a5c49a28bd3baa438e07a6c479c45faac28807808882aa21d216310ca13d80c4" name="gdb" arch="aarch64">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="9128728cf9c9af268240807c12d7adcb9beb7f4146d576775f4475f64a995d0a" name="gdb" arch="ppc64le">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="c8e9fe9388de5c5a829bad0013bf5e7e65837e51b2845e82efa7272d9c4f5607" name="gdb" arch="s390x">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="1666860c82d9ffdd9684f8287bbb6c518aef46e175d8f0dbcb08c4091e9124fd" name="gdb" arch="src">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="8d5f45346cc3972ba8b445a2da06945b95e86baab41b9a68a610ecd0477aa51b" name="gdb" arch="x86_64">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="1a0819e41afd305859db180d2a67722c2a381d31363b8ce2c7036bb1960dec0a" name="gdb-testresults" arch="aarch64">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="667caccccea37df0362a91d7aa397e90490c2d1ec120121f97d55c72c1917313" name="gdb-testresults" arch="src">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="f61ef390a754ad784b4b0c2f730eda6574a4c7400ea9c3041d886416d035065c" name="gdb-testresults" arch="ppc64le">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="aab3b6051cc20d344c479b72e822bad043e50a1f155651aeddf93dedfdaceab1" name="gdb-testresults" arch="s390x">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="69473eaf332784ba1bcb485a3fb0272dd296af91d80e452a454d6778fde90511" name="gdb-testresults" arch="x86_64">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="49343cbef3fbd9fab8c8f920c46f6eeaa3099301f80697991137e7dee536c38a" name="gdbserver" arch="aarch64">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="4d41b78c39712a8306fcb3fef60f5b0625a5e79db752bb0f23abcedf9c6915b5" name="gdbserver" arch="ppc64le">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="90997a811e9e91340f65957ae120910b8d69f24a85af2f14afce8e95b9c62d7b" name="gdbserver" arch="s390x">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="69c1f409d497d6a8a885389b85cb3496289773bc0449405b0288086dcc1de73e" name="gdbserver" arch="x86_64">
  <version epoch="0" ver="13.2" rel="150400.15.17.1"/>
  <changelog author="tdevries@suse.com" date="1680868800">- Revert to singlespec multibuild.</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- disable werror as a workaround for deprecation warnings with
  python 3.11 (bsc#1211052)</changelog>
  <changelog author="tdevries@suse.com" date="1686052800">- Rebase to 13.2 release (fedora 38 @ fc4e284)
  * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2.
- Patches dropped:
  * add-elfcompress_zstd.patch
  * binutils-gdb-support-zstd-compressed-debug-section.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
  * fix-gdb-build-elf-support-check-lzstd.patch
  * fixup-gdb-rhbz1325795-framefilters-test.patch
  * gdb-6.3-focus-cmd-prev-test.patch
  * gdb-6.3-inheritancetest-20050726.patch
  * gdb-6.3-test-dtorfix-20050121.patch
  * gdb-6.3-test-movedir-20050125.patch
  * gdb-6.3-threaded-watchpoints2-20050225.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-bz230000-power6-disassembly-test.patch
  * gdb-add-gdb-syscalls-makefile.patch
  * gdb-add-support-for-readline-8.2.patch
  * gdb-bz601887-dwarf4-rh-test.patch
  * gdb-disable-commit-resumed-in-target_kill.patch
  * gdb-fix-assert-in-handle_jit_event.patch
  * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch
  * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch
  * gdb-fortran-frame-string.patch
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-improved-eof-handling-when-using-readline-7.patch
  * gdb-physname-pr11734-test.patch
  * gdb-physname-pr12273-test.patch
  * gdb-record-handle-statx-system-call.patch
  * gdb-rhbz1325795-framefilters-test.patch
  * gdb-rhbz1398387-tab-crash-test.patch
  * gdb-runtest-pie-override.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
  * gdb-tdep-handle-pipe2-syscall-for-amd64.patch
  * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-test-expr-cumulative-archer.patch
  * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch
  * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch
  * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch
  * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
  * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch
  * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
  * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch
  * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch
  * gdb-testsuite-fix-test-failure-when-building-against-readline-v7.patch
  * gdb-testsuite-handle-init-errors-in-gdb.mi-user-selected-context-sync.exp.patch
  * gdb-testsuite-handle-missing-.note.gnu-stack.patch
  * gdb-testsuite-handle-older-python-in-gdb.python-py-send-packet.py.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-handle-quotes-in-gdb_py_module_available.patch
  * gdb-testsuite-handle-unordered-dict-in-gdb.python-py-mi-cmd.exp.patch
  * gdb-testsuite-refactor-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
  * gdb-testsuite-remove-global-declarations-in-gdb.threads-detach-step-over.exp.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * gdb-testsuite-skip-gdb.fortran-namelist.exp-for-gfortran-4.8.patch
  * gdb-testsuite-support-recording-of-getrandom.patch
  * gdb-testsuite-workaround-unnecessary-.s-file-with-gfortran-4.8.patch
  * gdb-update-syscalls-amd64-i386-linux.xml.patch
  * gdbserver-switch-to-right-process-in-find_one_thread.patch
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch
  * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches added:
  * fixup-gdb-bz634108-solib_address.patch
  * gdb-binutils29988-read_indexed_address.patch
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-rhbz2177655-aarch64-pauth-valid-regcache.patch
  * gdb-rhbz2183595-rustc-inside_main.patch
  * gdb-testsuite-fix-gdb.gdb-python-helper.exp-with-o2-.patch
  * gdb-testsuite-handle-output-after-prompt-in-gdb.thre.patch
  * gdb-testsuite-simplify-gdb.base-unwind-on-each-insn..patch
  * remove-some-unnecessary-includes-from-exp.y.patch
  * gdb-testsuite-fix-gdb.rust-main-crash.exp.patch
- Patches modified:
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.6-buildid-locate-rpm-suse.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-ccache-workaround.patch
  * gdb-core-open-vdso-warning.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gcore-bash.patch
  * gdb-linux_perf-bundle.patch
  * gdb-testsuite-ada-pie.patch
  * gdb-testsuite-add-xfail-in-gdb.arch-i386-pkru.exp.patch
  * gdb-testsuite-factor-out-proc-linux_kernel_version.patch
  * gdb-testsuite-prevent-compilation-fails-with-unix-fpie-pie.patch
- Maintenance script qa.sh:
  * Add -i586 and -x86_64.
  * Add KFAILs for PR29040, PR30521, PR30180, PR30518, PR30519.
  * Update some KFAIL patterns.
  * Add some factory KFAILs.
  * Add gdb.base/longjmp-until-in-main.exp in PR26967 KFAILs.
- Maintenance script qa-local.sh:
  * Factor out version variable, update to 13.2.
  * Try to give reason for build failure.
  * Use -$arch as argument to qa.sh.</changelog>
  <changelog author="tdevries@suse.com" date="1686312000">- Patches added (master backports):
  * aarch64-avoid-initializers-for-vlas.patch</changelog>
  <changelog author="tdevries@suse.com" date="1686571200">- Patches added (master backports):
  * fix-pr30369-regression-on-aarch64-arm-pr30506.patch
  * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch
  * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch
  * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch
  * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch
  * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch
  * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch
  * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch
  * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch
  * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch
  * powerpc-regression-fix-for-reverse-finish-command.patch
  * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch
  * move-step_until-procedure.patch
- Patches added (gdb-patches backport):
  * gdb-testsuite-add-have_host_locale.patch
- Patches added (fedora patch fixups):
  * fixup-gdb-6.3-gstack-20050411.patch
  * fixup-gdb-6.3-attach-see-vdso-test.patch
  * fixup-gdb-lineno-makeup-test.patch
  * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch
- Patches dropped:
  * gdb-ppc-power7-test.patch
  * gdb-rhbz1156192-recursive-dlopen-test.patch
  * gdb-6.3-bz140532-ppc-unwinding-test.patch
- Maintenance script qa.sh:
  * Add PR30540, PR30537, PR30021 and PR30542 KFAILs.
  * Add gdb.base/gcore-excessive-memory.exp internal error.
  * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment.</changelog>
  <changelog author="tdevries@suse.com" date="1686744000">- Patches added (master backports):
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch
- Maintenance script qa.sh:
  * Add PR30543 kfail.
  * Remove PR29793 kfail.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't
  needed because there's a build requirement on libdebuginfod-devel
  already, which will pull the shared library. And the latter,
  because it's bogus since RPM auto generated dependency will take
  care of that requirement.</changelog>
  <changelog author="tdevries@suse.com" date="1695816000">- Add "Suggests: %{python}-Pygments".
- Maintenance script qa.sh:
  * Note investigation of some ada test-cases.
  * Update PR30547 kfail.
  * Add PR28561 kfail.
  * Update PKRU-related kfail.
  * Use openSUSE_Factory_LegacyX86.i586 instead of
    openSUSE_Factory.i586.
  * Remove PR27813 kfail and corresponding todo.</changelog>
  <changelog author="tdevries@suse.com" date="1697803200">- Maintenance script import-fedora.sh:
  * New script.  Move skipped patches list from gdb.spec to script.
- Update to fedora 38 @ 82cc8e0.
- Patch renamed:
  * pass-const-frame_info_ptr-reference-for-skip_-langua.patch -&gt;
    gdb-rhbz2192105-ftbs-dangling-pointer
- Patches added:
  * gdb-bz2237392-dwarf-obstack-allocation.patch
  * gdb-bz2237515-debuginfod-double-free.patch
  * gdb-rhbz2160211-excessive-core-file-warnings.patch
  * gdb-rhbz2196395-debuginfod-legacy-openssl-crash.patch
  * gdb-rhbz2233961-CVE-2022-4806.patch
  * gdb-rhbz2233965-memory-leak.patch
- Maintenance script qa-local.sh:
  * Add openSUSE_Leap_15.5 and openSUSE_Factory_LegacyX86.
  * Add "List configs" item.
  * Skip i586 for SLE-11.
- Maintenance script qa.sh:
  * Make sure exit status is 0</changelog>
  <changelog author="tdevries@suse.com" date="1697889600">- Mention import-fedora.sh to fix warning.
- Maintenance script qa.sh:
  * Update kfail for PR28561.</changelog>
  <changelog author="tdevries@suse.com" date="1698148800">- Patches added (manual import from fedora rawhide @ 52a4dab):
  * gdb-rhbz1773651-gdb-index-internal-error.patch
- Patches added (backport from master):
  * gdb-support-rseq-auxvs.patch
  * gdb-symtab-fix-line-number-of-static-const-class-mem.patch
  * gdb-symtab-fix-too-many-symbols-in-gdbpy_lookup_stat.patch
  * gdb-symtab-handle-pu-in-iterate_over_some_symtabs.patch
  * gdb-symtab-work-around-pr-gas-29517.patch
  * gdb-testsuite-add-kfail-for-pr-ada-30908.patch
  * gdb-testsuite-add-xfail-for-gdb-29965-in-gdb.threads.patch
  * gdb-testsuite-fix-gdb.ada-mi_task_arg.exp-with-newer.patch
  * gdb-testsuite-fix-gdb.arch-i386-signal.exp-on-x86_64.patch
  * gdb-testsuite-fix-gdb.cp-m-static.exp-regression-on-.patch
  * gdb-testsuite-fix-gdb.dwarf2-nullptr_t.exp-with-cc-w.patch
  * gdb-testsuite-fix-regexps-in-gdb.base-step-over-sysc.patch
  * gdb-symtab-find-main-language-without-symtab-expansi.patch
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Patches moved (from "Backport from gdb-patches" to
  "Backports from master, available in next release"):
  * gdb-cli-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-add-have_host_locale.patch
- Maintenance script qa.sh:
  * Remove PR28463, PR28108, PR29247 and PR29160 kfails.
  * Remove PR30540, PR30908, PR29965 kfails.
  * Remove gdb.ada/mi_task_arg.exp kfail.
- Limit "Suggests: %{python}-Pygments" to SLE-15 and later.</changelog>
  <changelog author="tdevries@suse.com" date="1698321600">- Patches added (backport from master):
  * gdb-symtab-don-t-deduplicate-variables-in-gdb-index.patch
- Patches dropped (requires unsupported command):
  * gdb-testsuite-add-wait-for-index-cache-in-gdb.dwarf2.patch
- Maintenance script qa.sh:
  * Added PR30528 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698321601">- Maintenance script qa.sh:
  * Add comment to kfail for PR30528.
  * Add UNRESOLVED kfail for gdb.base/gcore-excessive-memory.exp.
  * Add UNRESOLVED kfail for PR31001.
  * Remove PR27238 kfail.
  * Add powerpc64le hw watchpoint kfails.
  * Add PR31004 kfail.
  * Add PR30531 kfail.
- Patches added (backport from master):
  * xcoffread.c-fix-werror-dangling-pointer-issue-with-m.patch
  * avoid-manual-memory-management-in-go-lang.c.patch
  * gdb-go-handle-v3-go_0-mangled-prefix.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698580800">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Update PR29781 kfail.
- Maintenance script qa-local.sh:
  * Add "Verify quilt setup" step.
- Patches added (backport from master):
  * gdb-symtab-handle-self-reference-die.patch
  * gdb-symtab-handle-self-reference-in-inherit_abstract.patch
  * gdb-symtab-add-optimized-out-static-var-to-cooked-in.patch</changelog>
  <changelog author="tdevries@suse.com" date="1698753600">- Maintenance script qa.sh:
  * Remove PR28467, PR29418, PR29420, PR29814 and PR29408 kfail.
  * Remove gdb.tui/tui-layout-asm-short-prog.exp kfail.
  * Remove commit f68eca29d3b, 29004660c94, 301fe55e9c4,
    4d88ae0c7b5, e7d69e72bfd, 8b272d7671f, 85819864f7c, 167f3beb655
    and a0eda3df5b7 kfails.
  * Add PR31015 kfail.
  * Remove PR29793 kfail.
  * Remove gdb.arch/powerpc-bcl-prologue.exp kfail.
  * Remove PR29813 and PR29816 kfail.</changelog>
  <changelog author="tdevries@suse.com" date="1698753601">- Maintenance script qa.sh:
  * Update PR28561 kfail.
  * Remove PR31015 kfail.
  * Remove PR30547 kfail.
- Patches added (backport from master):
  * gdb-symtab-add-producer_is_gas.patch
  * gdb-symtab-work-around-gas-pr28629.patch
  * gdb-tdep-fix-nr-array-elements-in-ppc64_aggregate_ca.patch
  * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-with-.patch
  * gdb-tui-fix-segfault-in-tui_find_disassembly_address.patch
  * gdb-tui-fix-wmaybe-uninitialized-in-tui_find_disasse.patch
  * gdb-testsuite-add-wait_for_msg-arg-to-term-resize-fi.patch
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-2.patch
  * gdb-tui-allow-command-window-of-1-or-2-lines.patch
  * gdb-tui-fix-resizing-of-terminal-to-1-or-2-lines.patch</changelog>
  <changelog author="tdevries@suse.com" date="1699876800">- Maintenance script qa.sh:
  * Update PR31004 kfail.
- Patches added (backport from gdb-patches):
  * gdb-fix-segfault-in-for_each_block-part-1.patch</changelog>
  <changelog author="tdevries@suse.com" date="1702468800">- Patches added (backport from gdb-patches, swo#30728):
  * gdb-symtab-refactor-condition-in-scan_attributes.patch
  * gdb-symtab-factor-out-m_die_range_map-usage.patch
  * gdb-symtab-handle-nullptr-parent-in-parent_map-set_p.patch
  * gdb-symtab-factor-out-m_deferred_entries-usage.patch
  * gdb-symtab-resolve-deferred-entries-inter-shard-case.patch
  * gdb-symtab-keep-track-of-processed-dies-in-shard.patch
  * gdb-symtab-resolve-deferred-entries-intra-shard-case.patch
  * gdb-symtab-don-t-defer-backward-refs-inter-cu-intra-.patch
  * gdb-symtab-recurse-into-c-dw_tag_subprogram-dies-for.patch
  * gdb-symtab-keep-track-of-all-parents-for-cooked-inde.patch
  * gdb-symtab-fix-dw_tag_inlined_subroutine-entries-in-.patch</changelog>
  <changelog author="tdevries@suse.com" date="1706788800">- Fix debuginfod handling:
  * Enable for sle_version &gt;= 150400 (bsc#1185605, jsc#PED-1149,
    jsc#PED-1138), SLE15-SP4 and later.
  * Enable for suse_version &gt;= 1600, ALP and Tumbleweed.
  * Add back "BuildRequires: libdebuginfod1" to prevent selecting
    dummy variant.
  * Add back "BuildRequires: debuginfod-client" to prevent
    unresolved due to conflict with dummy variant.
  * Add --with-debuginfod=yes to prevent silently dropping support.</changelog>
  <changelog author="tdevries@suse.com" date="1713960000">- Patch added (swo#31524, bsc#1222188):
  * make-pascal_language-print_type-handle-varstring-nul.patch</changelog>
</package>
<package pkgid="ad9af773194fa77ae730be24a7a3c8ce354809f6f88f660c3a79969cca831dc9" name="gdk-pixbuf" arch="src">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="1d87199380c43460d069bd96b3b9427f5df2c57b29f6fcc1e395ea2af3519c62" name="gdk-pixbuf-devel" arch="aarch64">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="fc3de2c455aea33f0d5aa6c6157073252bf04395427e331b3c6233b25c7596a1" name="gdk-pixbuf-devel" arch="ppc64le">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="f8566802a7a3417433501a9d16730c2eed9c42bd90a1140f9b11c1248ca2c7af" name="gdk-pixbuf-devel" arch="s390x">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="6084fab27e6ced8493b8d4fa8a09d5f7f27dafb96d85b14d80369bfd02167bb9" name="gdk-pixbuf-devel" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="856abaf924a1d9e0609fe7ff27435548a999e148263aaf8f7092d2de32165a6a" name="gdk-pixbuf-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="f108a378b9ebe201921eca505fbb45ca967c076d14e761a095c24809a2c55f51" name="gdk-pixbuf-lang" arch="noarch">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="fdb9a024ac671ba39f4e539d3fa919d18739879745095f93b867a093686da97f" name="gdk-pixbuf-query-loaders" arch="aarch64">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="da80a7d51199d6c1ec5dc9c0a428f362618f68e697235d20a68e3c8cb77beed5" name="gdk-pixbuf-query-loaders" arch="ppc64le">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="2a60c48ea109fedb2264ebd425dbad95176c8267f77021ff02c5501a1fcce0ba" name="gdk-pixbuf-query-loaders" arch="s390x">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="b34a5dddafae492b5ad1f6673851f1d7d1acba657c2e48b89e5b94d509674615" name="gdk-pixbuf-query-loaders" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="212dc8940991741c697128b14ba66600e556f81e72667ec25f465889f71fe48c" name="gdk-pixbuf-query-loaders-32bit" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="a0234561093f30bcb979bd4db23858fa86ac089491662e4c7933d4367df251cd" name="gdk-pixbuf-thumbnailer" arch="aarch64">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="41b022761c6d1232547c75cb086c7d1fd7b5b74827b6c7645698e0469d3b2d95" name="gdk-pixbuf-thumbnailer" arch="ppc64le">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="b56d63a072a4c4fbdcd2c33dead8e01620d4e2734f6cffbb6a7a61a64d2c7c1f" name="gdk-pixbuf-thumbnailer" arch="s390x">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="b0269b668cfbd165b3739637824b5506259c2383c68f614dc01fb0ebb57c1f95" name="gdk-pixbuf-thumbnailer" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="c801215c6c4a988d76bd7421b74daf078102307594083743758454435d5911f1" name="gettext-its-gtk4" arch="aarch64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="e7eddf9d95cb41f08ebec5927c1ffadde92994a550d362cd04185f6218f0cbda" name="gettext-its-gtk4" arch="ppc64le">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="3a23bf8f85f0093f1183e6775db95c91ffd3a2c2538866c61835ff16309268ca" name="gettext-its-gtk4" arch="s390x">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="2ebfb1d641512fd393433f2846d4e677417b5347151e5d9c217ca80587a673a0" name="gettext-its-gtk4" arch="x86_64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="ca7e32f39483a670afbe406ab3ed756bf54c51a2bf8212eb4a385341db4a309c" name="gfs2-kmp-azure" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150600.8.5.4"/>
  <changelog author="mkubecek@suse.cz" date="1717416000">- series.conf: cleanup
  Fix subsection header to silence series_insert error.
- commit 4628dc3</changelog>
  <changelog author="mkubecek@suse.cz" date="1717416001">- netfilter: nf_tables: release mutex after nft_gc_seq_end from
  abort path (CVE-2024-26925 bsc#1223390).
- commit 578a709</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717416002">- Add reference to L3 bsc#1225765 in BPF control flow graph and precision backtrack fixes (bsc#1225756)
  The L3 bsc#1225765 was created seperately since our customer requires
  PTF.
- Update patches.suse/bpf-fix-precision-backtracking-instruction-iteration.patch
- Update patches.suse/bpf-handle-ldimm64-properly-in-check_cfg.patch
- Update patches.suse/selftests-bpf-add-edge-case-backtracking-logic-test.patch
- Update patches.suse/selftests-bpf-precision-tracking-test-for-BPF_NEG-an.patch
- commit 054635e</changelog>
  <changelog author="msuchanek@suse.de" date="1717416003">- powerpc/uaccess: Use YZ asm constraint for ld (bsc#1194869).
- powerpc/uaccess: Fix build errors seen with GCC 13/14
  (bsc#1194869).
- commit 46b5d84</changelog>
  <changelog author="msuchanek@suse.de" date="1717416004">- blacklist.conf: PPC fsl_msi is not used
- commit ae6590d</changelog>
  <changelog author="msuchanek@suse.de" date="1717416005">- powerpc/pseries/lparcfg: drop error message from guest name
  lookup (bsc#1187716 ltc#193451 git-fixes).
- commit ceab637</changelog>
  <changelog author="mfranc@suse.cz" date="1717416006">- Update
  patches.suse/ALSA-hda-intel-sdw-acpi-fix-usage-of-device_get_name.patch
  (git-fixes CVE-2024-36955).
- Update
  patches.suse/ARM-9381-1-kasan-clear-stale-stack-poison.patch
  (git-fixes bsc#1225715 CVE-2024-36906).
- Update
  patches.suse/Bluetooth-HCI-Fix-potential-null-ptr-deref.patch
  (git-fixes bsc#1225579 CVE-2024-36011).
- Update
  patches.suse/Bluetooth-L2CAP-Fix-slab-use-after-free-in-l2cap_con.patch
  (git-fixes bsc#1225578 CVE-2024-36013).
- Update
  patches.suse/Bluetooth-msft-fix-slab-use-after-free-in-msft_do_cl.patch
  (git-fixes bsc#1225502 CVE-2024-36012).
- Update
  patches.suse/Bluetooth-qca-add-missing-firmware-sanity-checks.patch
  (git-fixes bsc#1225722 CVE-2024-36880).
- Update
  patches.suse/Bluetooth-qca-fix-firmware-check-error-path.patch
  (git-fixes CVE-2024-36942).
- Update
  patches.suse/Bluetooth-qca-fix-info-leak-when-fetching-fw-build-i.patch
  (git-fixes bsc#1225720 CVE-2024-36032).
- Update
  patches.suse/KVM-x86-mmu-Write-protect-L2-SPTEs-in-TDP-MMU-when-c.patch
  (git-fixes bsc#1223749 CVE-2024-26990).
- Update
  patches.suse/KVM-x86-pmu-Disable-support-for-adaptive-PEBS.patch
  (git-fixes bsc#1223692 CVE-2024-26992).
- Update
  patches.suse/Reapply-drm-qxl-simplify-qxl_fence_wait.patch
  (stable-fixes CVE-2024-36944).
- Update
  patches.suse/USB-core-Fix-access-violation-during-port-device-rem.patch
  (git-fixes bsc#1225734 CVE-2024-36896).
- Update
  patches.suse/amd-amdkfd-sync-all-devices-to-wait-all-processes-be.patch
  (stable-fixes CVE-2024-36949).
- Update patches.suse/bpf-Check-bloom-filter-map-value-size.patch
  (bsc#1224488 CVE-2024-35905 bsc#1225766 CVE-2024-36918).
- Update
  patches.suse/clk-sunxi-ng-h6-Reparent-CPUX-during-PLL-CPUX-rate-c.patch
  (git-fixes bsc#1225692 CVE-2023-52882).
- Update
  patches.suse/cxl-pci-Fix-disabling-memory-if-DVSEC-CXL-Range-does.patch
  (git-fixes CVE-2024-26761).
- Update
  patches.suse/drm-amd-display-Atom-Integrated-System-Info-v2_2-for.patch
  (stable-fixes bsc#1225735 CVE-2024-36897).
- Update
  patches.suse/drm-amd-pm-fixes-a-random-hang-in-S4-for-SMU-v13.0.4.patch
  (stable-fixes bsc#1225705 CVE-2024-36026).
- Update
  patches.suse/drm-amdkfd-range-check-cp-bad-op-exception-interrupt.patch
  (stable-fixes CVE-2024-36951).
- Update
  patches.suse/drm-arm-malidp-fix-a-possible-null-pointer-dereferen.patch
  (git-fixes bsc#1225593 CVE-2024-36014).
- Update
  patches.suse/drm-nouveau-firmware-Fix-SG_DEBUG-error-with-nvkm_fi.patch
  (stable-fixes bsc#1225728 CVE-2024-36885).
- Update
  patches.suse/efi-unaccepted-touch-soft-lockup-during-memory-accept.patch
  (git-fixes bsc#1225773 CVE-2024-36936).
- Update
  patches.suse/firewire-ohci-mask-bus-reset-interrupts-between-ISR-.patch
  (stable-fixes CVE-2024-36950).
- Update patches.suse/gpiolib-cdev-fix-uninitialised-kfifo.patch
  (git-fixes bsc#1225736 CVE-2024-36898).
- Update
  patches.suse/i40e-fix-vf-may-be-used-uninitialized-in-this-functi.patch
  (git-fixes bsc#1225698 CVE-2024-36020).
- Update
  patches.suse/maple_tree-fix-mas_empty_area_rev-null-pointer-deref.patch
  (git-fixes bsc#1225710 CVE-2024-36891).
- Update
  patches.suse/mm-slab-make-__free-kfree-accept-error-pointers.patch
  (git-fixes bsc#1225714 CVE-2024-36890).
- Update
  patches.suse/mmc-sdhci-msm-pervent-access-to-suspended-controller.patch
  (git-fixes bsc#1225708 CVE-2024-36029).
- Update
  patches.suse/net-hns3-fix-kernel-crash-when-devlink-reload-during.patch
  (git-fixes bsc#1225699 CVE-2024-36021).
- Update
  patches.suse/nouveau-dmem-handle-kcalloc-allocation-failure.patch
  (git-fixes CVE-2024-26943).
- Update
  patches.suse/nouveau-uvmm-fix-addr-range-calcs-for-remap-operatio.patch
  (git-fixes bsc#1225694 CVE-2024-36018).
- Update
  patches.suse/pinctrl-core-delete-incorrect-free-in-pinctrl_enable.patch
  (git-fixes CVE-2024-36940).
- Update
  patches.suse/pinctrl-devicetree-fix-refcount-leak-in-pinctrl_dt_t.patch
  (git-fixes CVE-2024-36959).
- Update
  patches.suse/ppdev-Add-an-error-check-in-register_device.patch
  (git-fixes bsc#1225640 CVE-2024-36015).
- Update patches.suse/qibfs-fix-dentry-leak.patch (git-fixes
  CVE-2024-36947).
- Update
  patches.suse/regmap-maple-Fix-cache-corruption-in-regcache_maple_.patch
  (git-fixes bsc#1225695 CVE-2024-36019).
- Update
  patches.suse/s390-cio-Ensure-the-copied-buf-is-NUL-terminated.patch
  (git-fixes bsc#1223869 bsc#1225747 CVE-2024-36931).
- Update
  patches.suse/s390-qeth-Fix-kernel-panic-after-setting-hsuid.patch
  (git-fixes bsc#1223874 bsc#1225775 CVE-2024-36928).
- Update
  patches.suse/scsi-qla2xxx-Fix-off-by-one-in-qla_edif_app_getstats.patch
  (git-fixes bsc#1225704 CVE-2024-36025).
- Update
  patches.suse/spi-fix-null-pointer-dereference-within-spi_sync.patch
  (git-fixes CVE-2024-36930).
- Update
  patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  (bsc#1224331 bsc#1224602 CVE-2024-35814).
- Update
  patches.suse/tty-n_gsm-fix-possible-out-of-bounds-in-gsm0_receive.patch
  (git-fixes bsc#1225642 CVE-2024-36016).
- Update
  patches.suse/usb-gadget-f_fs-Fix-race-between-aio_cancel-and-AIO-.patch
  (git-fixes bsc#1225749 CVE-2024-36894).
- Update
  patches.suse/usb-gadget-uvc-use-correct-buffer-size-when-parsing-.patch
  (git-fixes bsc#1225750 CVE-2024-36895).
- Update
  patches.suse/usb-typec-tcpm-Check-for-port-partner-validity-befor.patch
  (git-fixes bsc#1225748 CVE-2024-36893).
- Update
  patches.suse/wifi-iwlwifi-mvm-guard-against-invalid-STA-ID-on-rem.patch
  (stable-fixes bsc#1225769 CVE-2024-36921).
- Update
  patches.suse/wifi-iwlwifi-read-txq-read_ptr-under-lock.patch
  (stable-fixes CVE-2024-36922).
- Update
  patches.suse/wifi-nl80211-don-t-free-NULL-coalescing-rule.patch
  (git-fixes CVE-2024-36941).
- Update
  patches.suse/x86-efistub-Call-mixed-mode-boot-services-on-the-firmware-.patch
  (git-fixes bsc#1224742 CVE-2024-35803).
- commit 539780f</changelog>
  <changelog author="dwagner@suse.de" date="1717416007">- nvmet: fix ns enable/disable possible hang (git-fixes).
- nvme-multipath: fix io accounting on failover (git-fixes).
- nvme: fix multipath batched completion accounting (git-fixes).
- commit ed3b392</changelog>
  <changelog author="dwagner@suse.de" date="1717416008">- scsi: lpfc: Copyright updates for 14.4.0.2 patches
  (bsc#1225842).
- scsi: lpfc: Update lpfc version to 14.4.0.2 (bsc#1225842).
- scsi: lpfc: Add support for 32 byte CDBs (bsc#1225842).
- scsi: lpfc: Change lpfc_hba hba_flag member into a bitmask
  (bsc#1225842).
  Refresh:
  - patches.suse/lpfc-reintroduce-old-irq-probe-logic.patch
- scsi: lpfc: Introduce rrq_list_lock to protect active_rrq_list
  (bsc#1225842).
- scsi: lpfc: Clear deferred RSCN processing flag when driver
  is unloading (bsc#1225842).
- scsi: lpfc: Update logging of protection type for T10 DIF I/O
  (bsc#1225842).
- scsi: lpfc: Change default logging level for unsolicited CT
  MIB commands (bsc#1225842).
- commit 5a56384</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416009">- smb: client: fix mount when dns_resolver key is not available
  (git-fixes, bsc#1225172).
- commit 28edb5c</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416010">- cifs: fix leak of iface for primary channel (git-fixes,
  bsc#1225172).
- commit b7eb8e8</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416011">- Revert "cifs: reconnect work should have reference on server
  struct" (git-fixes, bsc#1225172).
- commit 3ca4c0c</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416012">- smb: client: fix parsing of SMB3.1.1 POSIX create context
  (git-fixes, bsc#1225172).
- commit 5f27f69</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416013">- cifs: failure to add channel on iface should bump up weight
  (git-fixes, bsc#1225172).
- commit 007b237</changelog>
  <changelog author="tonyj@suse.de" date="1717416014">- perf/x86: Fix out of range data (git-fixes).
- perf/x86/intel/ds: Don't clear -&gt;pebs_data_cfg for the last
  PEBS event (git-fixes).
- perf/x86/amd/lbr: Discard erroneous branch entries (git-fixes).
- commit 664d77f</changelog>
  <changelog author="dsterba@suse.com" date="1717588800">- blacklist.conf: remove fix for CVE-2024-35956 bsc#1224674, not applicable
- Delete patches.suse/btrfs-qgroup-fix-qgroup-prealloc-rsv-leak-in-subvolu.patch.
  Quoting bsc#1225945#c11:
  "So the upstream 6.5 kernel commit (1b53e51a4a8f ("btrfs: don't commit
  transaction for every subvol create")
  ) was never backported to SLE, so that fix eb96e221937a ("btrfs: fix
  unwritten extent buffer after snapshotting a new subvolume") was never
  backported."
- commit d947258</changelog>
  <changelog author="tonyj@suse.de" date="1717588801">- perf pmu: Count sys and cpuid JSON events separately (git
  fixes).
- perf stat: Don't display metric header for non-leader uncore
  events (git-fixes).
- perf daemon: Fix file leak in daemon_session__control
  (git-fixes).
- perf symbols: Fix ownership of string in dso__load_vmlinux()
  (git-fixes).
- perf thread: Fixes to thread__new() related to initializing comm
  (git-fixes).
- perf report: Avoid SEGV in report__setup_sample_type()
  (git-fixes).
- perf ui browser: Don't save pointer to stack memory (git-fixes).
- perf bench internals inject-build-id: Fix trap divide when
  collecting just one DSO (git-fixes).
- perf intel-pt: Fix unassigned instruction op (discovered by
  MemorySanitizer) (git-fixes).
- perf test shell arm_coresight: Increase buffer size for
  Coresight basic tests (git-fixes).
- perf docs: Document bpf event modifier (git-fixes).
- perf bench uprobe: Remove lib64 from libc.so.6 binary path
  (git-fixes).
- perf record: Fix debug message placement for test consumption
  (git-fixes).
- perf tests: Apply attributes to all events in object code
  reading test (git-fixes).
- perf tests: Make "test data symbol" more robust on Neoverse N1
  (git-fixes).
- perf annotate: Fix annotation_calc_lines() to pass correct
  address to get_srcline() (git-fixes).
- perf stat: Do not fail on metrics on s390 z/VM systems
  (git-fixes).
- perf sched timehist: Fix -g/--call-graph option failure
  (git-fixes).
- perf annotate: Get rid of duplicate --group option item
  (git-fixes).
- perf probe: Add missing libgen.h header needed for using
  basename() (git-fixes).
- perf record: Delete session after stopping sideband thread
  (git-fixes).
- perf auxtrace: Fix multiple use of --itrace option (git-fixes).
- perf script: Show also errors for --insn-trace option
  (git-fixes).
- perf lock contention: Add a missing NULL check (git-fixes).
- perf vendor events amd: Fix Zen 4 cache latency events
  (git-fixes).
- libperf evlist: Avoid out-of-bounds access (git-fixes).
- perf pmu: Fix a potential memory leak in perf_pmu__lookup()
  (git-fixes).
- perf print-events: make is_event_supported() more robust
  (git-fixes).
- perf list: fix short description for some cache events
  (git-fixes).
- perf metric: Don't remove scale from counts (git-fixes).
- perf stat: Avoid metric-only segv (git-fixes).
- perf expr: Fix "has_event" function for metric style events
  (git-fixes).
- perf srcline: Add missed addr2line closes (git-fixes).
- perf thread_map: Free strlist on normal path in
  thread_map__new_by_tid_str() (git-fixes).
- perf bpf: Clean up the generated/copied vmlinux.h (git-fixes).
- perf jevents: Drop or simplify small integer values (git-fixes).
- perf evsel: Fix duplicate initialization of data-&gt;id in
  evsel__parse_sample() (git-fixes).
- perf pmu: Treat the msr pmu as software (git-fixes).
- perf record: Check conflict between '--timestamp-filename'
  option and pipe mode before recording (git-fixes).
- perf record: Fix possible incorrect free in
  record__switch_output() (git-fixes).
- perf vendor events amd: Add Zen 4 memory controller events
  (git-fixes).
- perf top: Uniform the event name for the hybrid machine
  (git-fixes).
- perf top: Use evsel's cpus to replace user_requested_cpus
  (git-fixes).
- commit a1f9340</changelog>
  <changelog author="tonyj@suse.de" date="1717675200">- perf ui browser: Avoid SEGV on title (git fixes).
- commit 1578c22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717675201">- inet: inet_defrag: prevent sk release while still in use
  (CVE-2024-26921 bsc#1223138).
- commit 2016faf</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717675202">- net: preserve kabi for sk_buff (CVE-2024-26921 bsc#1223138).
- commit 7bf5961</changelog>
</package>
<package pkgid="ade4996026605540dba64e07962cc29218b7df63d19e942193d4dbc42c441e6a" name="gfs2-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150600.8.5.4"/>
  <changelog author="mkubecek@suse.cz" date="1717416000">- series.conf: cleanup
  Fix subsection header to silence series_insert error.
- commit 4628dc3</changelog>
  <changelog author="mkubecek@suse.cz" date="1717416001">- netfilter: nf_tables: release mutex after nft_gc_seq_end from
  abort path (CVE-2024-26925 bsc#1223390).
- commit 578a709</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717416002">- Add reference to L3 bsc#1225765 in BPF control flow graph and precision backtrack fixes (bsc#1225756)
  The L3 bsc#1225765 was created seperately since our customer requires
  PTF.
- Update patches.suse/bpf-fix-precision-backtracking-instruction-iteration.patch
- Update patches.suse/bpf-handle-ldimm64-properly-in-check_cfg.patch
- Update patches.suse/selftests-bpf-add-edge-case-backtracking-logic-test.patch
- Update patches.suse/selftests-bpf-precision-tracking-test-for-BPF_NEG-an.patch
- commit 054635e</changelog>
  <changelog author="msuchanek@suse.de" date="1717416003">- powerpc/uaccess: Use YZ asm constraint for ld (bsc#1194869).
- powerpc/uaccess: Fix build errors seen with GCC 13/14
  (bsc#1194869).
- commit 46b5d84</changelog>
  <changelog author="msuchanek@suse.de" date="1717416004">- blacklist.conf: PPC fsl_msi is not used
- commit ae6590d</changelog>
  <changelog author="msuchanek@suse.de" date="1717416005">- powerpc/pseries/lparcfg: drop error message from guest name
  lookup (bsc#1187716 ltc#193451 git-fixes).
- commit ceab637</changelog>
  <changelog author="mfranc@suse.cz" date="1717416006">- Update
  patches.suse/ALSA-hda-intel-sdw-acpi-fix-usage-of-device_get_name.patch
  (git-fixes CVE-2024-36955).
- Update
  patches.suse/ARM-9381-1-kasan-clear-stale-stack-poison.patch
  (git-fixes bsc#1225715 CVE-2024-36906).
- Update
  patches.suse/Bluetooth-HCI-Fix-potential-null-ptr-deref.patch
  (git-fixes bsc#1225579 CVE-2024-36011).
- Update
  patches.suse/Bluetooth-L2CAP-Fix-slab-use-after-free-in-l2cap_con.patch
  (git-fixes bsc#1225578 CVE-2024-36013).
- Update
  patches.suse/Bluetooth-msft-fix-slab-use-after-free-in-msft_do_cl.patch
  (git-fixes bsc#1225502 CVE-2024-36012).
- Update
  patches.suse/Bluetooth-qca-add-missing-firmware-sanity-checks.patch
  (git-fixes bsc#1225722 CVE-2024-36880).
- Update
  patches.suse/Bluetooth-qca-fix-firmware-check-error-path.patch
  (git-fixes CVE-2024-36942).
- Update
  patches.suse/Bluetooth-qca-fix-info-leak-when-fetching-fw-build-i.patch
  (git-fixes bsc#1225720 CVE-2024-36032).
- Update
  patches.suse/KVM-x86-mmu-Write-protect-L2-SPTEs-in-TDP-MMU-when-c.patch
  (git-fixes bsc#1223749 CVE-2024-26990).
- Update
  patches.suse/KVM-x86-pmu-Disable-support-for-adaptive-PEBS.patch
  (git-fixes bsc#1223692 CVE-2024-26992).
- Update
  patches.suse/Reapply-drm-qxl-simplify-qxl_fence_wait.patch
  (stable-fixes CVE-2024-36944).
- Update
  patches.suse/USB-core-Fix-access-violation-during-port-device-rem.patch
  (git-fixes bsc#1225734 CVE-2024-36896).
- Update
  patches.suse/amd-amdkfd-sync-all-devices-to-wait-all-processes-be.patch
  (stable-fixes CVE-2024-36949).
- Update patches.suse/bpf-Check-bloom-filter-map-value-size.patch
  (bsc#1224488 CVE-2024-35905 bsc#1225766 CVE-2024-36918).
- Update
  patches.suse/clk-sunxi-ng-h6-Reparent-CPUX-during-PLL-CPUX-rate-c.patch
  (git-fixes bsc#1225692 CVE-2023-52882).
- Update
  patches.suse/cxl-pci-Fix-disabling-memory-if-DVSEC-CXL-Range-does.patch
  (git-fixes CVE-2024-26761).
- Update
  patches.suse/drm-amd-display-Atom-Integrated-System-Info-v2_2-for.patch
  (stable-fixes bsc#1225735 CVE-2024-36897).
- Update
  patches.suse/drm-amd-pm-fixes-a-random-hang-in-S4-for-SMU-v13.0.4.patch
  (stable-fixes bsc#1225705 CVE-2024-36026).
- Update
  patches.suse/drm-amdkfd-range-check-cp-bad-op-exception-interrupt.patch
  (stable-fixes CVE-2024-36951).
- Update
  patches.suse/drm-arm-malidp-fix-a-possible-null-pointer-dereferen.patch
  (git-fixes bsc#1225593 CVE-2024-36014).
- Update
  patches.suse/drm-nouveau-firmware-Fix-SG_DEBUG-error-with-nvkm_fi.patch
  (stable-fixes bsc#1225728 CVE-2024-36885).
- Update
  patches.suse/efi-unaccepted-touch-soft-lockup-during-memory-accept.patch
  (git-fixes bsc#1225773 CVE-2024-36936).
- Update
  patches.suse/firewire-ohci-mask-bus-reset-interrupts-between-ISR-.patch
  (stable-fixes CVE-2024-36950).
- Update patches.suse/gpiolib-cdev-fix-uninitialised-kfifo.patch
  (git-fixes bsc#1225736 CVE-2024-36898).
- Update
  patches.suse/i40e-fix-vf-may-be-used-uninitialized-in-this-functi.patch
  (git-fixes bsc#1225698 CVE-2024-36020).
- Update
  patches.suse/maple_tree-fix-mas_empty_area_rev-null-pointer-deref.patch
  (git-fixes bsc#1225710 CVE-2024-36891).
- Update
  patches.suse/mm-slab-make-__free-kfree-accept-error-pointers.patch
  (git-fixes bsc#1225714 CVE-2024-36890).
- Update
  patches.suse/mmc-sdhci-msm-pervent-access-to-suspended-controller.patch
  (git-fixes bsc#1225708 CVE-2024-36029).
- Update
  patches.suse/net-hns3-fix-kernel-crash-when-devlink-reload-during.patch
  (git-fixes bsc#1225699 CVE-2024-36021).
- Update
  patches.suse/nouveau-dmem-handle-kcalloc-allocation-failure.patch
  (git-fixes CVE-2024-26943).
- Update
  patches.suse/nouveau-uvmm-fix-addr-range-calcs-for-remap-operatio.patch
  (git-fixes bsc#1225694 CVE-2024-36018).
- Update
  patches.suse/pinctrl-core-delete-incorrect-free-in-pinctrl_enable.patch
  (git-fixes CVE-2024-36940).
- Update
  patches.suse/pinctrl-devicetree-fix-refcount-leak-in-pinctrl_dt_t.patch
  (git-fixes CVE-2024-36959).
- Update
  patches.suse/ppdev-Add-an-error-check-in-register_device.patch
  (git-fixes bsc#1225640 CVE-2024-36015).
- Update patches.suse/qibfs-fix-dentry-leak.patch (git-fixes
  CVE-2024-36947).
- Update
  patches.suse/regmap-maple-Fix-cache-corruption-in-regcache_maple_.patch
  (git-fixes bsc#1225695 CVE-2024-36019).
- Update
  patches.suse/s390-cio-Ensure-the-copied-buf-is-NUL-terminated.patch
  (git-fixes bsc#1223869 bsc#1225747 CVE-2024-36931).
- Update
  patches.suse/s390-qeth-Fix-kernel-panic-after-setting-hsuid.patch
  (git-fixes bsc#1223874 bsc#1225775 CVE-2024-36928).
- Update
  patches.suse/scsi-qla2xxx-Fix-off-by-one-in-qla_edif_app_getstats.patch
  (git-fixes bsc#1225704 CVE-2024-36025).
- Update
  patches.suse/spi-fix-null-pointer-dereference-within-spi_sync.patch
  (git-fixes CVE-2024-36930).
- Update
  patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  (bsc#1224331 bsc#1224602 CVE-2024-35814).
- Update
  patches.suse/tty-n_gsm-fix-possible-out-of-bounds-in-gsm0_receive.patch
  (git-fixes bsc#1225642 CVE-2024-36016).
- Update
  patches.suse/usb-gadget-f_fs-Fix-race-between-aio_cancel-and-AIO-.patch
  (git-fixes bsc#1225749 CVE-2024-36894).
- Update
  patches.suse/usb-gadget-uvc-use-correct-buffer-size-when-parsing-.patch
  (git-fixes bsc#1225750 CVE-2024-36895).
- Update
  patches.suse/usb-typec-tcpm-Check-for-port-partner-validity-befor.patch
  (git-fixes bsc#1225748 CVE-2024-36893).
- Update
  patches.suse/wifi-iwlwifi-mvm-guard-against-invalid-STA-ID-on-rem.patch
  (stable-fixes bsc#1225769 CVE-2024-36921).
- Update
  patches.suse/wifi-iwlwifi-read-txq-read_ptr-under-lock.patch
  (stable-fixes CVE-2024-36922).
- Update
  patches.suse/wifi-nl80211-don-t-free-NULL-coalescing-rule.patch
  (git-fixes CVE-2024-36941).
- Update
  patches.suse/x86-efistub-Call-mixed-mode-boot-services-on-the-firmware-.patch
  (git-fixes bsc#1224742 CVE-2024-35803).
- commit 539780f</changelog>
  <changelog author="dwagner@suse.de" date="1717416007">- nvmet: fix ns enable/disable possible hang (git-fixes).
- nvme-multipath: fix io accounting on failover (git-fixes).
- nvme: fix multipath batched completion accounting (git-fixes).
- commit ed3b392</changelog>
  <changelog author="dwagner@suse.de" date="1717416008">- scsi: lpfc: Copyright updates for 14.4.0.2 patches
  (bsc#1225842).
- scsi: lpfc: Update lpfc version to 14.4.0.2 (bsc#1225842).
- scsi: lpfc: Add support for 32 byte CDBs (bsc#1225842).
- scsi: lpfc: Change lpfc_hba hba_flag member into a bitmask
  (bsc#1225842).
  Refresh:
  - patches.suse/lpfc-reintroduce-old-irq-probe-logic.patch
- scsi: lpfc: Introduce rrq_list_lock to protect active_rrq_list
  (bsc#1225842).
- scsi: lpfc: Clear deferred RSCN processing flag when driver
  is unloading (bsc#1225842).
- scsi: lpfc: Update logging of protection type for T10 DIF I/O
  (bsc#1225842).
- scsi: lpfc: Change default logging level for unsolicited CT
  MIB commands (bsc#1225842).
- commit 5a56384</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416009">- smb: client: fix mount when dns_resolver key is not available
  (git-fixes, bsc#1225172).
- commit 28edb5c</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416010">- cifs: fix leak of iface for primary channel (git-fixes,
  bsc#1225172).
- commit b7eb8e8</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416011">- Revert "cifs: reconnect work should have reference on server
  struct" (git-fixes, bsc#1225172).
- commit 3ca4c0c</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416012">- smb: client: fix parsing of SMB3.1.1 POSIX create context
  (git-fixes, bsc#1225172).
- commit 5f27f69</changelog>
  <changelog author="ematsumiya@suse.de" date="1717416013">- cifs: failure to add channel on iface should bump up weight
  (git-fixes, bsc#1225172).
- commit 007b237</changelog>
  <changelog author="tonyj@suse.de" date="1717416014">- perf/x86: Fix out of range data (git-fixes).
- perf/x86/intel/ds: Don't clear -&gt;pebs_data_cfg for the last
  PEBS event (git-fixes).
- perf/x86/amd/lbr: Discard erroneous branch entries (git-fixes).
- commit 664d77f</changelog>
  <changelog author="dsterba@suse.com" date="1717588800">- blacklist.conf: remove fix for CVE-2024-35956 bsc#1224674, not applicable
- Delete patches.suse/btrfs-qgroup-fix-qgroup-prealloc-rsv-leak-in-subvolu.patch.
  Quoting bsc#1225945#c11:
  "So the upstream 6.5 kernel commit (1b53e51a4a8f ("btrfs: don't commit
  transaction for every subvol create")
  ) was never backported to SLE, so that fix eb96e221937a ("btrfs: fix
  unwritten extent buffer after snapshotting a new subvolume") was never
  backported."
- commit d947258</changelog>
  <changelog author="tonyj@suse.de" date="1717588801">- perf pmu: Count sys and cpuid JSON events separately (git
  fixes).
- perf stat: Don't display metric header for non-leader uncore
  events (git-fixes).
- perf daemon: Fix file leak in daemon_session__control
  (git-fixes).
- perf symbols: Fix ownership of string in dso__load_vmlinux()
  (git-fixes).
- perf thread: Fixes to thread__new() related to initializing comm
  (git-fixes).
- perf report: Avoid SEGV in report__setup_sample_type()
  (git-fixes).
- perf ui browser: Don't save pointer to stack memory (git-fixes).
- perf bench internals inject-build-id: Fix trap divide when
  collecting just one DSO (git-fixes).
- perf intel-pt: Fix unassigned instruction op (discovered by
  MemorySanitizer) (git-fixes).
- perf test shell arm_coresight: Increase buffer size for
  Coresight basic tests (git-fixes).
- perf docs: Document bpf event modifier (git-fixes).
- perf bench uprobe: Remove lib64 from libc.so.6 binary path
  (git-fixes).
- perf record: Fix debug message placement for test consumption
  (git-fixes).
- perf tests: Apply attributes to all events in object code
  reading test (git-fixes).
- perf tests: Make "test data symbol" more robust on Neoverse N1
  (git-fixes).
- perf annotate: Fix annotation_calc_lines() to pass correct
  address to get_srcline() (git-fixes).
- perf stat: Do not fail on metrics on s390 z/VM systems
  (git-fixes).
- perf sched timehist: Fix -g/--call-graph option failure
  (git-fixes).
- perf annotate: Get rid of duplicate --group option item
  (git-fixes).
- perf probe: Add missing libgen.h header needed for using
  basename() (git-fixes).
- perf record: Delete session after stopping sideband thread
  (git-fixes).
- perf auxtrace: Fix multiple use of --itrace option (git-fixes).
- perf script: Show also errors for --insn-trace option
  (git-fixes).
- perf lock contention: Add a missing NULL check (git-fixes).
- perf vendor events amd: Fix Zen 4 cache latency events
  (git-fixes).
- libperf evlist: Avoid out-of-bounds access (git-fixes).
- perf pmu: Fix a potential memory leak in perf_pmu__lookup()
  (git-fixes).
- perf print-events: make is_event_supported() more robust
  (git-fixes).
- perf list: fix short description for some cache events
  (git-fixes).
- perf metric: Don't remove scale from counts (git-fixes).
- perf stat: Avoid metric-only segv (git-fixes).
- perf expr: Fix "has_event" function for metric style events
  (git-fixes).
- perf srcline: Add missed addr2line closes (git-fixes).
- perf thread_map: Free strlist on normal path in
  thread_map__new_by_tid_str() (git-fixes).
- perf bpf: Clean up the generated/copied vmlinux.h (git-fixes).
- perf jevents: Drop or simplify small integer values (git-fixes).
- perf evsel: Fix duplicate initialization of data-&gt;id in
  evsel__parse_sample() (git-fixes).
- perf pmu: Treat the msr pmu as software (git-fixes).
- perf record: Check conflict between '--timestamp-filename'
  option and pipe mode before recording (git-fixes).
- perf record: Fix possible incorrect free in
  record__switch_output() (git-fixes).
- perf vendor events amd: Add Zen 4 memory controller events
  (git-fixes).
- perf top: Uniform the event name for the hybrid machine
  (git-fixes).
- perf top: Use evsel's cpus to replace user_requested_cpus
  (git-fixes).
- commit a1f9340</changelog>
  <changelog author="tonyj@suse.de" date="1717675200">- perf ui browser: Avoid SEGV on title (git fixes).
- commit 1578c22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717675201">- inet: inet_defrag: prevent sk release while still in use
  (CVE-2024-26921 bsc#1223138).
- commit 2016faf</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717675202">- net: preserve kabi for sk_buff (CVE-2024-26921 bsc#1223138).
- commit 7bf5961</changelog>
</package>
<package pkgid="23e47d730c271be4e4071afa878666f6d831b6a233bd2fdbec6320018df7751d" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.52" rel="150000.188.1"/>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
</package>
<package pkgid="52213409290973ef5296368e0f6b23d21b5b3e756e56585e14742ea9860a24ea" name="ghostscript" arch="ppc64le">
  <version epoch="0" ver="9.52" rel="150000.188.1"/>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
</package>
<package pkgid="62eda0fe78f4d2d6cffc0479b98151349b75bdb31c0b695eb3cfa7c307e30f13" name="ghostscript" arch="s390x">
  <version epoch="0" ver="9.52" rel="150000.188.1"/>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
</package>
<package pkgid="c2e2b35c69235143f6d0fceab2f71d042ecb4c4648883b6d584e842f0723651f" name="ghostscript" arch="src">
  <version epoch="0" ver="9.52" rel="150000.188.1"/>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
</package>
<package pkgid="9cffdb7242e622f00e1065bc39c28eda62cece53b200a0c1eda629df79263278" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.52" rel="150000.188.1"/>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
</package>
<package pkgid="095d2c8243eb6605d200d9582c15e49b6e175cc2440569f6c8efdb41bdabc7da" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.52" rel="150000.188.1"/>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
</package>
<package pkgid="ba1aa3216603f78147acd1c5bb3be8f44ea69290a99a8d776f7cd0d32b97aefc" name="ghostscript-devel" arch="ppc64le">
  <version epoch="0" ver="9.52" rel="150000.188.1"/>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
</package>
<package pkgid="5c2d8dfc4ab0ba89f00941de8f059ac29bb58076635884bbceae1d6b56561093" name="ghostscript-devel" arch="s390x">
  <version epoch="0" ver="9.52" rel="150000.188.1"/>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
</package>
<package pkgid="4c33cc96f0050cc74207d05881e971e4b445b4fd03706a24ff8228e6b44805dd" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.52" rel="150000.188.1"/>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
</package>
<package pkgid="f79de0243ee0b6ccdb9043ccf179c3752d0d05f3413a00939d2950e62d72280d" name="ghostscript-x11" arch="aarch64">
  <version epoch="0" ver="9.52" rel="150000.188.1"/>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
</package>
<package pkgid="bf7cee449bf63ef702598a8fbe478c7aac674a1c50bbfc7e6495646e900de979" name="ghostscript-x11" arch="ppc64le">
  <version epoch="0" ver="9.52" rel="150000.188.1"/>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
</package>
<package pkgid="e545c6abec30db0c703390c8fc461e0a0fd9d6e3dd5ad944885df2c9bf9b1652" name="ghostscript-x11" arch="s390x">
  <version epoch="0" ver="9.52" rel="150000.188.1"/>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
</package>
<package pkgid="3093b4f78f175dbbe06cf0f554be5d5131f4e6e59118f76ae4cf1c7dc5a5de4f" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.52" rel="150000.188.1"/>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
</package>
<package pkgid="d630223e17f0f2ee0d048353894897c729870cf2825c78f7b58f1ac7e9a556e6" name="gio-branding-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="150600.35.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1513771200">- Revert "Update .gschema.override.in: evolution.desktop has been
  renamed to org.gnome.Evolution.desktop.": This will only be valid
  with GNOME 3.28.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513944000">- Update .gschema.override.in: evolution.desktop has been renamed
  to org.gnome.Evolution.desktop (for GNOME 3.28).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1525348800">- Update .gschema.override.in: referring the implementation of
  bsc#1077332, fully enable gnome-software notification which is
  now used on both leap15 and sle15 to replace the legacy g-s-d
  notification method (boo#1090042).</changelog>
  <changelog author="qkzhu@suse.com" date="1530273600">- Recommend sound-theme-freedesktop by both openSUSE and SLE.
  (bsc#1097595)</changelog>
  <changelog author="dimstar@opensuse.org" date="1541592000">- Update gnome_defaults: evince.desktop has been renamed to
  org.gnome.Evince.desktop with GNOME 3.30.</changelog>
  <changelog author="dimstar@opensuse.org" date="1572264000">- Fix keyassignment for help: the schema was changed to array of
  strings, as multiple keys can now be bound.</changelog>
  <changelog author="mgorse@suse.com" date="1572350400">- Add super+f1 key binding for help to match GNOME default.</changelog>
  <changelog author="qkzhu@suse.com" date="1578398400">- Update .gschema.override.in:
  + Delete unused settings-daemon.plugins.power keys.
  + Set sleep-inactive-ac-timeout, sleep-inactive-battery-timeout to
    0 for SLE to be consistent with old versions (bsc#1158497).</changelog>
  <changelog author="qkzhu@suse.com" date="1584100800">- Update .gschema.override.in:
  + Set sleep-inactive-ac-timeout, sleep-inactive-battery-timeout to
    0 for Leap to be consistent with SLE and old versions (bsc#1158497).</changelog>
  <changelog author="dimstar@opensuse.org" date="1589803200">- Only recommend wallpaper-branding-%{branding_name} when
  gnome-shell is present. Allows gio to be installed on text-only
  systems without pulling wallpapers in (boo#1162600).</changelog>
  <changelog author="fcrozat@suse.com" date="1600430400">- Update .gschema.override.in (jsc#SLE-14772):
  * add different key for screenlock
  * update background color for SLE.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1602417600">- Add priority of 20 to gschema override, otherwise you can't
  override it</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update for libreoffice-* desktop files no longer dropping the
  libreoffice- prefix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644667200">- Drop gnome-documents from favorite-apps for both openSUSE and
  SLED, package is archived upstream.</changelog>
  <changelog author="yfjiang@suse.com" date="1647345600">- Update .gschema.override.in: Change default libreoffice startup
  entry to libreoffice-startcenter.desktop according to the
  libreoffice update (bsc#1195836, bsc#1196951).</changelog>
  <changelog author="milachew@mail.lv" date="1666008000">- Fix default openSUSE wallpaper is not present in dark mode (boo#1204138).</changelog>
  <changelog author="dimstar@opensuse.org" date="1669896000">- Adjust desktop file names of preferred applications:
  + evince.desktop =&gt; org.gnome.evince.desktop (since GNOME 3.30).
  + eog.desktop =&gt; org.gnome.eog.desktop (since GNOME 3.36).
  + file-roller.desktop =&gt; org.gnome.FileRoller.desktop
- Fix name to impress: libreoffice-impress.destop.</changelog>
  <changelog author="dimstar@opensuse.org" date="1671537600">- Prefer file-roller over nautilus for archives.</changelog>
  <changelog author="dimstar@opensuse.org" date="1681905600">- prefer org.gnome.TextEditor.desktop instead of gedit.
  patterns-gnome was changed to install TextEditor (boo#1210648).</changelog>
</package>
<package pkgid="f1ca329e25d7b31d4b9b5cd36b934e6045a261b2762a5c5db3bfbff35bfe0125" name="gio-branding-upstream" arch="noarch">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="78e20038bbf4a8bf3902f87ee440a72cd5c7bd1fc6542733c0e5a98155f4e5ff" name="glib2" arch="src">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="f92d37b2109807de6e00f269c2aadeec29e999bcba316a96d8f5e10c6f690c33" name="glib2-branding-SLE" arch="src">
  <version epoch="0" ver="15" rel="150600.35.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1513771200">- Revert "Update .gschema.override.in: evolution.desktop has been
  renamed to org.gnome.Evolution.desktop.": This will only be valid
  with GNOME 3.28.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513944000">- Update .gschema.override.in: evolution.desktop has been renamed
  to org.gnome.Evolution.desktop (for GNOME 3.28).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1525348800">- Update .gschema.override.in: referring the implementation of
  bsc#1077332, fully enable gnome-software notification which is
  now used on both leap15 and sle15 to replace the legacy g-s-d
  notification method (boo#1090042).</changelog>
  <changelog author="qkzhu@suse.com" date="1530273600">- Recommend sound-theme-freedesktop by both openSUSE and SLE.
  (bsc#1097595)</changelog>
  <changelog author="dimstar@opensuse.org" date="1541592000">- Update gnome_defaults: evince.desktop has been renamed to
  org.gnome.Evince.desktop with GNOME 3.30.</changelog>
  <changelog author="dimstar@opensuse.org" date="1572264000">- Fix keyassignment for help: the schema was changed to array of
  strings, as multiple keys can now be bound.</changelog>
  <changelog author="mgorse@suse.com" date="1572350400">- Add super+f1 key binding for help to match GNOME default.</changelog>
  <changelog author="qkzhu@suse.com" date="1578398400">- Update .gschema.override.in:
  + Delete unused settings-daemon.plugins.power keys.
  + Set sleep-inactive-ac-timeout, sleep-inactive-battery-timeout to
    0 for SLE to be consistent with old versions (bsc#1158497).</changelog>
  <changelog author="qkzhu@suse.com" date="1584100800">- Update .gschema.override.in:
  + Set sleep-inactive-ac-timeout, sleep-inactive-battery-timeout to
    0 for Leap to be consistent with SLE and old versions (bsc#1158497).</changelog>
  <changelog author="dimstar@opensuse.org" date="1589803200">- Only recommend wallpaper-branding-%{branding_name} when
  gnome-shell is present. Allows gio to be installed on text-only
  systems without pulling wallpapers in (boo#1162600).</changelog>
  <changelog author="fcrozat@suse.com" date="1600430400">- Update .gschema.override.in (jsc#SLE-14772):
  * add different key for screenlock
  * update background color for SLE.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1602417600">- Add priority of 20 to gschema override, otherwise you can't
  override it</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update for libreoffice-* desktop files no longer dropping the
  libreoffice- prefix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644667200">- Drop gnome-documents from favorite-apps for both openSUSE and
  SLED, package is archived upstream.</changelog>
  <changelog author="yfjiang@suse.com" date="1647345600">- Update .gschema.override.in: Change default libreoffice startup
  entry to libreoffice-startcenter.desktop according to the
  libreoffice update (bsc#1195836, bsc#1196951).</changelog>
  <changelog author="milachew@mail.lv" date="1666008000">- Fix default openSUSE wallpaper is not present in dark mode (boo#1204138).</changelog>
  <changelog author="dimstar@opensuse.org" date="1669896000">- Adjust desktop file names of preferred applications:
  + evince.desktop =&gt; org.gnome.evince.desktop (since GNOME 3.30).
  + eog.desktop =&gt; org.gnome.eog.desktop (since GNOME 3.36).
  + file-roller.desktop =&gt; org.gnome.FileRoller.desktop
- Fix name to impress: libreoffice-impress.destop.</changelog>
  <changelog author="dimstar@opensuse.org" date="1671537600">- Prefer file-roller over nautilus for archives.</changelog>
  <changelog author="dimstar@opensuse.org" date="1681905600">- prefer org.gnome.TextEditor.desktop instead of gedit.
  patterns-gnome was changed to install TextEditor (boo#1210648).</changelog>
</package>
<package pkgid="f1b271a8b3a3fe31f79cec29487ef768e7b2d297da4df9e26527a81b68147878" name="glib2-devel" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="5c333f98ffaeb5abc0532f863839855f35fe22174eb467b156d1bf9a2cc661e9" name="glib2-devel" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="e722d25b3a2f9042843ea8584689646ad553c9bfd902a0b9c82941c570c67ec4" name="glib2-devel" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="a3685e86678aec8748b984afe2126b0e7bbf6cb9faea0035ca4b7efab5298c88" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="a891392e48bc0c267f90623d3a54a23e0ae42caf3f91186e08e43bc51d8b1d62" name="glib2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="a66d645463ac00928b2660b5dbdc971b682baa7c82147d38f877392ac9afcde5" name="glib2-devel-static" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="03a83cb5132964221f741581068f98f3397cc3c32c94dfe96657811558b9e1bd" name="glib2-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="ad63841ad7a30f5696d114c92565bb52b9a39ada9ba555e4051bbfedd86e208d" name="glib2-devel-static" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="2c694684f36d65dc72a76e43124e9dc9e6df1dcf475810f292b8a6a9ee69bf2f" name="glib2-devel-static" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="ffe1a8a9b50fa0f1ae64fecf66956692e039db9193201c0a7cdc22b6436b5a49" name="glib2-doc" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="751823438052b2a6dbe500feb0e2c53710c6db24be66519375f0a6fd3a06162e" name="glib2-doc" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="2bff44c68b529724ba51fdd8b3b33fa6179f80965b006a130d6bc813f8cb47b3" name="glib2-doc" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="7a66ab3eadd698cdef95c79dd9cd3c7249163b31f8037bf470a96d69beb90c80" name="glib2-doc" arch="src">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="b3cc63cc5af72c08c1d0c900bd528a9b949468a1e2873867c1dfb79fa9dbf876" name="glib2-doc" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="1d67a2e4a3a8022ed274e25b3cf4e1320a91ffe120bd7054342f560d3123c9d9" name="glib2-lang" arch="noarch">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="135342c223e1e625cd02ccc70f929954e6115b5084d161cada52bda112bbb6f2" name="glib2-tests-devel" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="fd0f02bbc766c3bfc5492a590c54353a03f126ade3d89878f684c8d9817ed251" name="glib2-tests-devel" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="8fcc0e23afe19f9aebb5ada142ffb896ebc670b624456ac94de29ba02e169237" name="glib2-tests-devel" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="60c696ba2108610865f76f498f6badc67b2a8889feec35432e27af6bb3e46590" name="glib2-tests-devel" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="a995cfdbab8eb6b26d89430b3bcf54aff850628b97b82faf7fe55aa1f57d7168" name="glib2-tools" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="85cadf8b5e70db2cfb2824a9844302473396c46a2a6daa060fe8126d8bffed26" name="glib2-tools" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="7bab21b1bbaf24244c691ff374f76b83968b1bed7943fa0c80a57150ecc7eb30" name="glib2-tools" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="b28895269fdf0c32c9f2837efc71a67a480b92736d24d4a17e1a730e7d6a6807" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="7941605a0f1eaf862b082ff6ddb594c0ebc888326aacc7234484d21415d59969" name="glib2-tools-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="d093f3bef5c2fa87b2028f42229a510a3e94445fc9c61e9e6a351e7bec23c342" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="004f87319db857d8a34f2d5a7ebc269263a2cbf4fa1d83844bb14f3d6943dff1" name="glibc" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="8aa2ec60ea7c88aa95d0c8cdc6ce4677e37613e8cd8a5054997d969e34ffe23d" name="glibc" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="c944bf02746074fe33d613eb561134dbb3d27ce9d523c1cd6b7303e990feefad" name="glibc" arch="src">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="29e3d76e1c9c871686d1a3cb4c7cb1eeb142e710dd2d0fa06e74159c83837a59" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="8986e50ef6045d5e26c4d6799b25d60eb1f150c47716b705fda387308c6a72df" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="7af237877570b7795aa8fb3bd37a83b0c5d89a9f23a55d579283f69c9c4ae54f" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="02f944fd4763418258c478c3cab91bb1198eb6eccc1c5e9953f82a46ab5c3179" name="glibc-devel" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="3bbcabb3a4b1aca58ceb59746a42b026e4b72752fed9066bf7c7d0a292d2e3b2" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="fa8a5fd84caf08a0338ca6c951ebd79951a4c98ebfec3376c3c895a6faf3f92e" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="46ad461f0b0691fcb35a2396b9d2382e20dc946f3ace1f39c4d963184068e75d" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="a9c043b23f80dcd10270c468c10d6e471ddd9892656b5b20e08f77045d2e09c5" name="glibc-devel-static" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="0731d0ca4e790339b72229995457d2d69e0759729ebe414d78d1ee00a0d44699" name="glibc-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="d3d33fa0cc8ab0582fdba584096834e091b3d1fcf18383a90ffb5c2e882fddad" name="glibc-devel-static" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="71f9dcc04c4989973de580ae8826676b4737a3dc8b251075e8d29436f74632f6" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="72a48b953cdbd09c9047eb48707084576924d2a7136c61c60ccdbe6c905d5081" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="a8a43daa8685a0608a0f07366e280b0b6b533c2fe0b0a7bd63a78ad4234bf513" name="glibc-extra" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="4def86911cc2176a997499dddbd76ddf9ba18af9e631fc091b3b8b262472449d" name="glibc-extra" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="21cad1e2ea6475bfa779d5872f66dbe2a55fe2495760360fc7b16ce001e7e74a" name="glibc-extra" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="e63806b238550ca9e92d207e456323bc5cd5b87231210326ed76cf07246295a8" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="71f7634f854cd9823b13ce378ccbd598c551bd7d8a052337873f0f24ce67f216" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="f4853628ca60d29725cdbbfe26e852f9426adafdd3140af08c45970aa30f756f" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="3625ede73fe018ee6dcd903dc2f8b2725ca279c85dc9752f1ef8c6ede3c3fcaa" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="e8b47b35e8a62a3736ffd5585954a1776a440442abd1e2420c2b81dff44f8b6f" name="glibc-lang" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="5332cf24e454c85513d2dee81cde0f3de927fd2fd5cb98d439e81bb7da3df369" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="dda97f40b2dd2580dc843cbeab5f02ee2336dffd5c182832a87ea5f17aed0e63" name="glibc-locale" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="fb0ac08f6219f97ec490af5704543dd5fe27dab04a187f89521623376cc88b11" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="204c1995f22fa6c1009f5bcae60cb1e8e7136449cec98ae2a5bf42a10e90ae07" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="0900a90128c70d07dcf9b95400826016b9114f8cbdd28911ae50623e8b484f72" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="4c6982c59e5f27d9c977e9e105725107b9a4e7655f38231dc174153b86587ddd" name="glibc-locale-base" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="0f8d46bafe6651be3a0e189b6793284965feb4663177c87c1792be06f5c8d241" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="481858bf8a4b6f83f340197198e8913922e56f9bf94679aa85025386350fca1e" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="7b8691cf09199381213d3cdd9a774b51669e4cc6eb57b6de51449815b5ffcef4" name="glibc-locale-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="9b90b7b45d0bc09bec923da33f44ca3d9ec6c9ab44c81cbca49446228b7c3e70" name="glibc-profile" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="70d4523183e11ce9ce780dad8daa35d6a652fb556fe5b3debc25d329bfe957c2" name="glibc-profile" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="05c23acf064f1a7f603b3e23e5ba3f4e81c7587599dfa7f2511d482ec086e170" name="glibc-profile" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="819ef10d78b37d35160ca6e0f36d3b1752f399e1d450545c61a41a0fd5f3a131" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="b855972e6fed5dfab085ac1cc0072045a06cda26fe1ebb91c761f7b91d6b8554" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="593c26559bcc56324c7b2bafb8d7034f14954add853e2e4d244f7ce8bb3c89ae" name="glibc-utils" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="448ee46731b380bfbf1ce2a43ca561ff27b3cf26660e9d3fa18e81ecde84145f" name="glibc-utils" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="185068439e98631e0b07e77292794dd99f3a2d58f86971b68135293fc1dfcbd5" name="glibc-utils" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="2f32bd4737d467f6394e9c393ed0ee9c0481d17243574d40b63169de05afb4f0" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="ef3c2c7718c4d46f954961834d37d4f2380cf1bcc5a7b9d75f126c5fd5f00d65" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="aa941ad1d9fb58ddea27e948111daa02ed80302277dc23a49a27ed137006cdb3" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="69d2d0d8ae097779c45c4357fc771a4ac6de02cff7f3c23916a9376d99588cec" name="gnome-browser-connector" arch="aarch64">
  <version epoch="0" ver="42.1" rel="150600.3.3.1"/>
  <changelog author="badshah400@gmail.com" date="1661083200">- Initial package (renamed from chrome-gnome-shell).</changelog>
  <changelog author="badshah400@gmail.com" date="1662724800">- Update to version 42.1:
  + Added detected python path in scripts shebang.
  + Restored compatibility with Python 3.8.
  + Fix errors in `get_variant` helper that leads to connector
    crash.
  + Fixed build system error when python dependencies are missing.
- Update Source tag to reflect new home.
- Drop hashbang fixes to python scripts: no longer required.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662897600">- Use new upstream source url.</changelog>
  <changelog author="yfjiang@suse.com" date="1714996800">- Patch to support python 3.6 on SLE/Leap 15.6 (bsc#1223902):
  python36.patch.</changelog>
</package>
<package pkgid="e494c29fc34fad4e0535ec4b454613222b534ebda11fd285d1a6a9823fb4ab8c" name="gnome-browser-connector" arch="ppc64le">
  <version epoch="0" ver="42.1" rel="150600.3.3.1"/>
  <changelog author="badshah400@gmail.com" date="1661083200">- Initial package (renamed from chrome-gnome-shell).</changelog>
  <changelog author="badshah400@gmail.com" date="1662724800">- Update to version 42.1:
  + Added detected python path in scripts shebang.
  + Restored compatibility with Python 3.8.
  + Fix errors in `get_variant` helper that leads to connector
    crash.
  + Fixed build system error when python dependencies are missing.
- Update Source tag to reflect new home.
- Drop hashbang fixes to python scripts: no longer required.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662897600">- Use new upstream source url.</changelog>
  <changelog author="yfjiang@suse.com" date="1714996800">- Patch to support python 3.6 on SLE/Leap 15.6 (bsc#1223902):
  python36.patch.</changelog>
</package>
<package pkgid="33a548b8698959a1665a3420ae3574bbf6a99ed12f145da561fcfe9fff1df7a1" name="gnome-browser-connector" arch="s390x">
  <version epoch="0" ver="42.1" rel="150600.3.3.1"/>
  <changelog author="badshah400@gmail.com" date="1661083200">- Initial package (renamed from chrome-gnome-shell).</changelog>
  <changelog author="badshah400@gmail.com" date="1662724800">- Update to version 42.1:
  + Added detected python path in scripts shebang.
  + Restored compatibility with Python 3.8.
  + Fix errors in `get_variant` helper that leads to connector
    crash.
  + Fixed build system error when python dependencies are missing.
- Update Source tag to reflect new home.
- Drop hashbang fixes to python scripts: no longer required.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662897600">- Use new upstream source url.</changelog>
  <changelog author="yfjiang@suse.com" date="1714996800">- Patch to support python 3.6 on SLE/Leap 15.6 (bsc#1223902):
  python36.patch.</changelog>
</package>
<package pkgid="2ef63fd1f529dd7bebb49cd60574336fefecc407d00849e1ac2aa8b0b26d7d80" name="gnome-browser-connector" arch="src">
  <version epoch="0" ver="42.1" rel="150600.3.3.1"/>
  <changelog author="badshah400@gmail.com" date="1661083200">- Initial package (renamed from chrome-gnome-shell).</changelog>
  <changelog author="badshah400@gmail.com" date="1662724800">- Update to version 42.1:
  + Added detected python path in scripts shebang.
  + Restored compatibility with Python 3.8.
  + Fix errors in `get_variant` helper that leads to connector
    crash.
  + Fixed build system error when python dependencies are missing.
- Update Source tag to reflect new home.
- Drop hashbang fixes to python scripts: no longer required.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662897600">- Use new upstream source url.</changelog>
  <changelog author="yfjiang@suse.com" date="1714996800">- Patch to support python 3.6 on SLE/Leap 15.6 (bsc#1223902):
  python36.patch.</changelog>
</package>
<package pkgid="a0336fa0d8a7378d5147a1094e703a97c692a29ef3dca2849a5145b18cdef23d" name="gnome-browser-connector" arch="x86_64">
  <version epoch="0" ver="42.1" rel="150600.3.3.1"/>
  <changelog author="badshah400@gmail.com" date="1661083200">- Initial package (renamed from chrome-gnome-shell).</changelog>
  <changelog author="badshah400@gmail.com" date="1662724800">- Update to version 42.1:
  + Added detected python path in scripts shebang.
  + Restored compatibility with Python 3.8.
  + Fix errors in `get_variant` helper that leads to connector
    crash.
  + Fixed build system error when python dependencies are missing.
- Update Source tag to reflect new home.
- Drop hashbang fixes to python scripts: no longer required.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662897600">- Use new upstream source url.</changelog>
  <changelog author="yfjiang@suse.com" date="1714996800">- Patch to support python 3.6 on SLE/Leap 15.6 (bsc#1223902):
  python36.patch.</changelog>
</package>
<package pkgid="f4e869cd3f156bc55c37216f5aa0e59af8f5256b5061234a1c419a03951599e8" name="gnome-control-center" arch="aarch64">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="6248f48f35b64b4284b3f827c3b6fda4abb5360983065a0530d61768ce1e4b1c" name="gnome-control-center" arch="ppc64le">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="86cc0084874f4ff6f6a292a6a0253263d2c813a8cd670485d3dd9b734a533694" name="gnome-control-center" arch="s390x">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="e061865a25deae51c87dbaed98de821e32624c5008f345214594ec70ce6b8af5" name="gnome-control-center" arch="src">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="8d763505aba2638adbe9bf921b3009b585e62bc5d1db8164a5283ac98f1cfa7a" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="d0dd9ff23bb19e2e9691874ebac30f5a75a63230d0290463e6babe81d0ddf58a" name="gnome-control-center-color" arch="noarch">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="024105c6bfbc8e235832b68394bc5c2ef67084c2040cd1c702c71be34b1870a5" name="gnome-control-center-devel" arch="noarch">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="e9baa50d7bfa9cd043efb19046596f89041ecc4f90c267515f5e4d303eb99c4e" name="gnome-control-center-goa" arch="noarch">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="bdcb3df5ad8bc1112238300abb5ef781cfbd33b313394382b381c41858734d6b" name="gnome-control-center-lang" arch="noarch">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="a087ffaefca30a45b903ee72754b3c4d785b429ada6cf2389cca0e739facde98" name="gnome-control-center-user-faces" arch="noarch">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="62d1d8b97a9f98ee0bbc4bf01e1699c289f47a0a15ffcab12c910f7054a033b4" name="go1.21" arch="aarch64">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="d6aa6928a9102267bac92f78a80aabe741cb5ad25772561b9ed183af0d5c01db" name="go1.21" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="58a5678203b9bd3cd4999a0b677927a1f777460f363a50955ca1433338e73e2a" name="go1.21" arch="s390x">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="a4e5f737e1c7cf21b1a050e4bbc908c9d78862b925f2cc079ea6f39943b602c8" name="go1.21" arch="src">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="84ebbff958f1d880e66c8e92fab9f6204615c326b79b96d5d11ee8531eb224ce" name="go1.21" arch="x86_64">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="b0a285aa796ded4e24aaeff45b161ccb28ba71564bec464711c3a0840ef8fcbc" name="go1.21" arch="aarch64">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="2ca7cf3ad823faba6bb3c913322809f0b35c2352ec15089e2a3848b422195c07" name="go1.21" arch="ppc64le">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="981bd378e3c32d758087ac994d0cab16f7ef7cce520222dcd4c5a424a8b969d1" name="go1.21" arch="s390x">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="d90bca356a620a74c7bbb60dd701d6459f138a6d5fe8090b8c4946bca400a6ca" name="go1.21" arch="src">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="13737517004f540194426d6d7f7fec74292c12d05ad76d6ae2052cf169bd8886" name="go1.21" arch="x86_64">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="af8020895eea15a27093b14e433d0ddf41fae92e8664d5cdbb91e1b20d77395e" name="go1.21-doc" arch="aarch64">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="273f3b307b60acc4a1b0c141ddfff8a1db6f28442d3c4a3c4fd7677dd0fa5113" name="go1.21-doc" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="b760ef4163c98b4b5e5eba2b95bb8e238d53a34d27e518f516c41688b502f682" name="go1.21-doc" arch="s390x">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="ebe00a29f5782810d7059d40931aa5ae864230a01fd2d181af40b60143206741" name="go1.21-doc" arch="x86_64">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="43b158a39770c7e1c622c1607bcf8187da2f12ded1d6905fa7ee0ec486bd7fa4" name="go1.21-doc" arch="aarch64">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="845c2d4f415f6ca5c47fbbe05bf1584679a826584319903a49b56e4f627f14da" name="go1.21-doc" arch="ppc64le">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="2b4f288c159498ca6174c8602a6a4586923d9ae70412d9d1f968f657087ad3dc" name="go1.21-doc" arch="s390x">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="c6441b45e9a762d5f90f021ecddec8e5a75137e3fbe5cc56fa5a6cb69905809f" name="go1.21-doc" arch="x86_64">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="e9624897d0a61cd083a3f6db7b2326c5372085aa7f8621ffa03ef237be204260" name="go1.21-race" arch="aarch64">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="5b207cce4a0bfe0700fd2e3dd013ed597a47d81cb8c0d79af16fc9847ebf6446" name="go1.21-race" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="b95045d2d85939daa1f8cf6c371d2685bca67877045a22bdd57f2795a38031bb" name="go1.21-race" arch="s390x">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="3648570b0a064dd6fc40faef002ee887a7157075f97d9a9631499d27d4daf5b5" name="go1.21-race" arch="x86_64">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="876ff2764f63e917f78ace5a471e596ec000af44f2eada5637b6d198b1430ec7" name="go1.21-race" arch="aarch64">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="1368a7dcaafb11ba1ea74483806c30e3fb73abe619464fd99e2d6857e353f6a4" name="go1.21-race" arch="ppc64le">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="fcbc6e0a5fc7faa4b70b1b1702fc470d72cb433e35019e886c652b32bd05c849" name="go1.21-race" arch="s390x">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="02d7748fff0f7f194c0f7262847a1f24774910f88b1ff9d6f25eb9599a622b2a" name="go1.21-race" arch="x86_64">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="515b5bfdf1a66d49d4b1c43d3abdcb127b584c0deb71835e040dbff4b4aab095" name="go1.22" arch="aarch64">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="8d71389e3137ac70375bdcfc980bfee9c174341d20023b320485deb2b8bfe21a" name="go1.22" arch="ppc64le">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="0f25ddbdb63ae9480f5379226308c68f9d2dbc50a3675bac55ef8fd056474108" name="go1.22" arch="s390x">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="2d6c48264ac5bd1ac900ac9efb71d4d5c7a83b98fab268ddf7062c4fdaf2ae42" name="go1.22" arch="src">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="21d4babd831a525a19467d668220638fc84fba899a308d633b5bda8038184680" name="go1.22" arch="x86_64">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="2650849ac236b9bf81f08a77b793e53f96b286e867e8b816576dbf99c187a0d1" name="go1.22" arch="aarch64">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="efa9da38e3319fb6bff56b4e2dd821d20a0a5fb4714db4b903739f37f3bf9372" name="go1.22" arch="ppc64le">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="dbd72fd550401060bff39fffd51978816e70f62a56f0b2d5ff84aaf9d2250c71" name="go1.22" arch="s390x">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="50cc290d7887e47f367018f9a2aded32c7630067a4ac47646ac342622edb3b93" name="go1.22" arch="src">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="0c456e296a5c4e05bbde4e74590bb735e255d9f2bb19ac8ab5f71045ae710ee2" name="go1.22" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="bcffc7086e2db7c1997eb7ced6fcc3b79226cc0a8fa7a4b6730b78dbc458ac15" name="go1.22-doc" arch="aarch64">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="494e33fcba6cc9f591b48f98c44b9d6024308a42eb44f75401006b487062c92b" name="go1.22-doc" arch="ppc64le">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="b8a255f75cd529b7f82afa8ead95d6409f2bb02f3f0ec91e3c81089e657ceb62" name="go1.22-doc" arch="s390x">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="c9ba8e1177d6800e88ef9b90bd09c26f56bdffaff72ab556fdb4799547691b56" name="go1.22-doc" arch="x86_64">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="3bf32aad28f4042275882e4c9525026b09090a058cc1e489eeca247188389a2a" name="go1.22-doc" arch="aarch64">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="438c8063fdf6a3cffbaff2494eb8630ee83d8119bc278f2354ac1b08f6aadba1" name="go1.22-doc" arch="ppc64le">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="cd8b3e6f39f63002e983824bb42458ebfe77cf7e056d8f0f3bf00d97e7a37753" name="go1.22-doc" arch="s390x">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="01c7200f6c0ca14b56d06b5ee5bba4be648dedd7bce590a8e0092a8b291b6680" name="go1.22-doc" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="7efc858e0ab25918f413f98ba12fc0c496569d0c3fb242c3f31a5b0332332711" name="go1.22-race" arch="aarch64">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="135e77e0db05eed339d7e570a6700045ac854889ea674bfd92912a0afe377d56" name="go1.22-race" arch="ppc64le">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="17ef9b311318aaf6713edcc1f45baac1349b2bd5a2ec43bab9899971407694f6" name="go1.22-race" arch="s390x">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="6ba89f0c4d8f13a177ec53084ff5d09e23b405365e1af061564682c10f198006" name="go1.22-race" arch="x86_64">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="1cd59471350a7800e711866ca05c056381c7a94c3ccd07f9ff1f3a781a661eb5" name="go1.22-race" arch="aarch64">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="c09fcd79e71931fd70d19f27562d2bbbcde87e87b88fc89f407f502d94ef6d93" name="go1.22-race" arch="ppc64le">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="57862e589247e42cbca46031a195741057f07b5d56b6ec05314803d917adab46" name="go1.22-race" arch="s390x">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="9713917b8cfbe6900b1e441b14e2c4fa601f5993fc17d0e2a292d4d9d65500bf" name="go1.22-race" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="ef3639f2020ef4ae2a5b44534a672dd81621e1b3cdc7aa6566a7f0dc8cedb9c7" name="golang-github-prometheus-alertmanager" arch="aarch64">
  <version epoch="0" ver="0.26.0" rel="150100.4.22.1"/>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.13.0
  See https://github.com/prometheus/alertmanager/releases</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521028800">- spec: fix argument for %fdupes
- Update to 0.14.0:
  + Enhancements:
  * Allow templating PagerDuty receiver severity
  * Include receiver name in failed notifications log messages
  * Add mesh metrics
  + Bug fixes:
  * Don't notify of resolved alerts if none were reported firing
  * Notify only when new firing alerts are added
  * Don't count alerts with EndTime in the future as resolved</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521115200">- fix config token in alermanager.yml hipchat_url -&gt; hipchat_api_url</changelog>
  <changelog author="jan.fajerski@suse.com" date="1549627200">- Update to 0.16.1:
  + Bug Fixes:
  * Do not populate cluster info if clustering is disabled in API v2
- Update to 0.16.0:
  + Deprecate API v1
  + Remove api/v1/alerts/groups GET endpoint
  + Revert Alertmanager working directory changes in Docker image back to /alertmanager
  + Using the recommended label syntax for maintainer in Dockerfile
  + Change alertmanager_notifications_total to count attempted notifications, not only successful ones (#1578)
  + Run as nobody inside container
  + Support w for weeks when creating silences, remove y for year
  + Features:
  * Introduce OpenAPI generated API v2
  * Lookup parts in strings using regexp.MatchString in templates
  * Support image/thumb url in attachment in Slack notifier
  * Support custom TLS certificates for the email notifier
  * Add support for images and links in the PagerDuty notification config
  * Add support for grouping by all labels
  * [amtool] Add timeout support to amtool commands
  * [amtool] Added config routes tools for vizualization and testing routes
  * [amtool] Support adding alerts using amtool
  + Enhancements:
  * Add support for --log.format
  * Add CORS support to API v2
  * Support HTML, URL title and custom sounds for Pushover
  * Update Alert compact view
  * Support adding custom fields to VictorOps notifications
  * Add help link in UI to Alertmanager documentation
  * Enforce HTTP or HTTPS URLs in Alertmanager config
  * Make OpsGenie API Key a templated string
  * Add name, value and SlackConfirmationField to action in Slack notifier
  * Show more alert information on silence form and silence view pages
  * Add cluster peers DNS refresh job
  + Bug Fixes:
  * Fix unmarshalling of secret URLs in config
  * Do not write groupbyall and groupby when marshaling config
  * Make a copy of firing alerts with EndsAt=0 when flushing
  * Respect regex matchers when recreating silences in UI
  * Change DefaultGlobalConfig to a function in Alertmanager configuration
  * Fix email template typo in alert-warning style
  * Fix silence redirect on silence creation UI page
  * Add missing callback_id parameter in Slack notifier
  * Throw error if no auth mechanism matches in email notifier
  * Use quoted-printable transfer encoding for the email notifier
  * Do not merge expired gossip messages
  * Fix "PLAIN" auth during notification via smtp-over-tls on port 465
  * [amtool] Support for assuming first label is alertname in silence add and query
  * [amtool] Support assuming first label is alertname in alert query with matchers
  * [amtool] Fix config path check in amtool
  * [amtool] Fix rfc3339 example texts
  * [amtool] Fixed issue with loading path of a default configs
- Update to 0.15.3
  + Bug Fixes:
  * Fix alert merging supporting both empty and set EndsAt property for firing alerts send by Prometheus
- Update to 0.15.2:
  + Enhancements:
  * [amtool] Add support for stdin to check-config
  * Log PagerDuty v1 response on BadRequest
  + Bug Fixes:
  * Correctly encode query strings in notifiers (#1516)
  * Add cache control headers to the API responses to avoid IE caching
  * Avoid listener blocking on unsubscribe
  * Fix a bunch of unhandled errors
  * Update PagerDuty API V2 to send full details on resolve
  * Validate URLs at config load time
  * Fix Settle() interval
  * Fix email to be green if only none firing
  * Handle errors in notify
  * Fix templating of hipchat room id
- Update to 0.15.1:
  + Bug Fixes:
  * Fix email template typo in alert-warning style
  * Fix regression in Pager Duty config
  * Catch templating errors in Wechat Notify
  * Fail when no private address can be found for cluster
  * Make sure we don't miss the first pushPull when joining cluster
  * Fix concurrent read and wirte group error in dispatch
- Update to 0.15.0:
  + [amtool] Update silence add and update flags
  + Replace deprecated InstrumentHandle
  + Validate Slack field config and only allow the necessary input
  + Remove legacy alert ingest endpoint
  + Move to memberlist as underlying gossip protocol including cluster flag changes from --mesh.xxx to --cluster.xxx
  + Move Alertmanager working directory in Docker image to /etc/alertmanager
  + The default group by is no labels.
  + Features:
  * [amtool] Filter alerts by receiver
  * Wait for mesh to settle before sending alerts
  * [amtool] Support basic auth in alertmanager url
  * Make HTTP clients used for integrations configurable
  + Enhancements:
  * Support receiving alerts with end time and zero start time
  * Sort dispatched alerts by job+instance
  * Support alert query filters active and unprocessed
  * [amtool] Expose alert query flags --active and --unprocessed
  * Add Slack actions to notifications
  + Bug Fixes:
  * Register nflog snapShotSize metric
  * Sort alerts in correct order before flushing to notifiers
  * Don't reset initial wait timer if flush is in-progress
  * Fix resolved alerts still inhibiting
  * Template wechat config fields
  * Notify resolved alerts properly
  * Fix parsing for label values with commas
  * Hide sensitive Wechat configuration
  * Prepopulate matchers when recreating a silence
  * Fix wechat panic
  * Allow empty matchers in silences/filtering
  * Properly configure HTTP client for Wechat integration</changelog>
  <changelog author="jan.fajerski@suse.com" date="1555416000">- Update to 0.16.2
  + Bug Fixes:
  * Redact notifier URL from logs to not leak secrets embedded in the URL
  * Allow sending of unauthenticated SMTP requests when smtp_auth_username is not supplied</changelog>
  <changelog author="jan.fajerski@suse.com" date="1564747200">- Add network-online (Wants and After) dependency to systemd unit bsc#1143913</changelog>
  <changelog author="elimat@opensuse.org" date="1595073600">- Update to 0.21.0
  + Changes:
  * [HipChat] Remove HipChat integration as it is end-of-life. #2282
  * [amtool] Remove default assignment of environment variables. #2161
  * [PagerDuty] Enforce 512KB event size limit. #2225
  + Enhancements:
  * [amtool] Add cluster command to show cluster and peer statuses. #2256
  * Add redirection from / to the routes prefix when it isn't empty. #2235
  * [Webhook] Add max_alerts option to limit the number of alerts included in the payload. #2274
  * Improve logs for API v2, notifications and clustering. #2177 #2188 #2260 #2261 #2273
  + Bugfixes:
  * Fix child routes not inheriting their parent route's grouping when group_by: [...]. #2154
  * [UI] Fix the receiver selector in the Alerts page when the receiver name contains regular expression metacharacters such as +. #2090
  * Fix error message about start and end time validation. #2173
  * Fix a potential race condition in dispatcher. #2208
  * [API v2] Return an empty array of peers when the clustering is disabled. #2203
  * Fix the registration of alertmanager_dispatcher_aggregation_groups and alertmanager_dispatcher_alert_processing_duration_seconds metrics. #2200
  * Always retry notifications with back-off. #2290
- Run spec-cleaner
- Remove rpm group
- Update to build with go1.14 for Factory (Tumbleweed)
- Refresh example config from upstream</changelog>
  <changelog author="elimat@opensuse.org" date="1598616000">- Fix permissions for /var/lib/prometheus to match
  golang-github-prometheus-prometheus package. Otherwise the install check will
  fail.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604059200">- Fix building amtool (bsc#1176943)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update packaging
  * Remove systemd and shadow hard requirements
  * use the system user provided by the system-user-prometheus subpackge
  * add 'prometheus-alertmanager' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1606737600">- Exclude s390 architecture</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus-alertmanager.service</changelog>
  <changelog author="ecsos@opensuse.org" date="1646308800">- Update to version 0.23.0:
  * Release 0.23.0
  * Release 0.23.0-rc.0
  * amtool: Detect version drift and warn users (#2672)
  * Add ability to skip TLS verification for amtool (#2663)
  * Fix empty isEqual in amtool. (#2668)
  * Fix main tests (#2670)
  * cli: add new template render command (#2538)
  * OpsGenie: refer to alert instead of incident (#2609)
  * Docs: target_match and source_match are DEPRECATED (#2665)
  * Fix test not waiting for cluster member to be ready
- Add go_modules to _service.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646913600">- Update vendor tarball with prometheus/client_golang 1.11.1
  (bsc#1196338, jsc#SLE-24077)
  + Added 0002-Update-prometheus-client-to-version-1.11.1.patch
- Use %autosetup macro</changelog>
  <changelog author="witold.bedyk@suse.com" date="1649419200">- Update required Go version to 1.16</changelog>
  <changelog author="witold.bedyk@suse.com" date="1658232000">- Do not include sources (bsc#1200725)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678449600">- Prevent authentication bypass via cache poisoning
  (bsc#1208051, CVE-2022-46146)
- Add 0003-Update-prometheus-exporter-toolkit-to-0.7.3.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1700568000">- Rebase 0001-Default-settings.patch
- Drop 0002-Update-prometheus-client-to-version-1.11.1.patch
  fixed upstream (now uses v1.15.1)
- Drop 0003-Update-prometheus-exporter-toolkit-to-0.7.3.patch
  fixed upstream (now uses v0.10.0)
- Add 0002-Set-build-flags.patch
- Require Go 1.20 or newer for building
- Remove not used build flags
- Create position independent executables (PIE)
- Disable striping the binaries only for SLE 15 SP3
- Add System/Monitoring group tag
- Rework service file to use obscpio
  * run tar and recompress services at buildtime
  * do not generate automatically changelog entries
- Update to version 0.26.0 (jsc#PED-7353):
  https://github.com/prometheus/alertmanager/releases/tag/v0.26.0
  * (CVE-2023-40577, bsc#1218838): Fix stored XSS via the
    /api/v1/alerts endpoint in the Alertmanager UI
  * Configuration: Fix empty list of receivers and inhibit_rules
    would cause the alertmanager to crash
  * Templating: Fixed a race condition when using the title
    function. It is now race-safe
  * API: Fixed duplicate receiver names in the api/v2/receivers API
    endpoint
  * API: Attempting to delete a silence now returns the correct
    status code, 404 instead of 500
  * Clustering: Fixes a panic when tls_client_config is empty
  * Webhook: url is now marked as a secret. It will no longer show
    up in the logs as clear-text
  * Metrics: New label reason for
    alertmanager_notifications_failed_total metric to indicate the
    type of error of the alert delivery
  * Clustering: New flag --cluster.label, to help to block any
    traffic that is not meant for the cluster
  * Integrations: Add Microsoft Teams as a supported integration
- Update to version 0.25.0:
  https://github.com/prometheus/alertmanager/releases/tag/v0.25.0
  * Fail configuration loading if api_key and api_key_file are
    defined at the same time
  * Fix the alertmanager_alerts metric to avoid counting resolved
    alerts as active. Also added a new alertmanager_marked_alerts
    metric that retain the old behavior
  * Trim contents of Slack API URLs when reading from files
  * amtool: Avoid panic when the label value matcher is empty
  * Fail configuration loading if api_url is empty for OpsGenie
  * Fix email template for resolved notifications
  * Add proxy_url support for OAuth2 in HTTP client configuration
  * Reload TLS certificate and key from disk when updated
  * Add Discord integration
  * Add Webex integration
  * Add min_version support to select the minimum TLS version in
    HTTP client configuration
  * Add max_version support to select the maximum TLS version in
    HTTP client configuration
  * Emit warning logs when truncating messages in notifications
  * Support HEAD method for the /-/healty and /-/ready endpoints
  * Add support for reading global and local SMTP passwords from
    files
  * UI: Add 'Link' button to alerts in list
  * UI: Allow to choose the first day of the week as Sunday or
    Monday
- Update to version 0.24.0:
  https://github.com/prometheus/alertmanager/releases/tag/v0.24.0
  * Fix HTTP client configuration for the SNS receiver
  * Fix unclosed file descriptor after reading the silences
    snapshot file
  * Fix field names for mute_time_intervals in JSON marshaling
  * Ensure that the root route doesn't have any matchers
  * Truncate the message's title to 1024 chars to avoid hitting
    Slack limits
  * Fix the default HTML email template (email.default.html) to
    match with the canonical source
  * Detect SNS FIFO topic based on the rendered value
  * Avoid deleting and recreating a silence when an update is
    possible
  * api/v2: Return 200 OK when deleting an expired silence
  * amtool: Fix the silence's end date when adding a silence. The
    end date is (start date + duration) while it used to be
    (current time + duration). The new behavior is consistent with
    the update operation
  * Add the /api/v2 prefix to all endpoints in the OpenAPI
    specification and generated client code
  * Add --cluster.tls-config experimental flag to secure cluster
    traffic via mutual TLS
  * Add Telegram integration</changelog>
  <changelog author="witold.bedyk@suse.com" date="1702296000">- Do not create PIE for s390x architecture</changelog>
  <changelog author="witold.bedyk@suse.com" date="1709035200">- Use %patch -P N instead of deprecated %patchN</changelog>
</package>
<package pkgid="21feaeded9c86f5b9e76c7b11356f7f128e86d45533dfb1f2b80df9917244908" name="golang-github-prometheus-alertmanager" arch="ppc64le">
  <version epoch="0" ver="0.26.0" rel="150100.4.22.1"/>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.13.0
  See https://github.com/prometheus/alertmanager/releases</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521028800">- spec: fix argument for %fdupes
- Update to 0.14.0:
  + Enhancements:
  * Allow templating PagerDuty receiver severity
  * Include receiver name in failed notifications log messages
  * Add mesh metrics
  + Bug fixes:
  * Don't notify of resolved alerts if none were reported firing
  * Notify only when new firing alerts are added
  * Don't count alerts with EndTime in the future as resolved</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521115200">- fix config token in alermanager.yml hipchat_url -&gt; hipchat_api_url</changelog>
  <changelog author="jan.fajerski@suse.com" date="1549627200">- Update to 0.16.1:
  + Bug Fixes:
  * Do not populate cluster info if clustering is disabled in API v2
- Update to 0.16.0:
  + Deprecate API v1
  + Remove api/v1/alerts/groups GET endpoint
  + Revert Alertmanager working directory changes in Docker image back to /alertmanager
  + Using the recommended label syntax for maintainer in Dockerfile
  + Change alertmanager_notifications_total to count attempted notifications, not only successful ones (#1578)
  + Run as nobody inside container
  + Support w for weeks when creating silences, remove y for year
  + Features:
  * Introduce OpenAPI generated API v2
  * Lookup parts in strings using regexp.MatchString in templates
  * Support image/thumb url in attachment in Slack notifier
  * Support custom TLS certificates for the email notifier
  * Add support for images and links in the PagerDuty notification config
  * Add support for grouping by all labels
  * [amtool] Add timeout support to amtool commands
  * [amtool] Added config routes tools for vizualization and testing routes
  * [amtool] Support adding alerts using amtool
  + Enhancements:
  * Add support for --log.format
  * Add CORS support to API v2
  * Support HTML, URL title and custom sounds for Pushover
  * Update Alert compact view
  * Support adding custom fields to VictorOps notifications
  * Add help link in UI to Alertmanager documentation
  * Enforce HTTP or HTTPS URLs in Alertmanager config
  * Make OpsGenie API Key a templated string
  * Add name, value and SlackConfirmationField to action in Slack notifier
  * Show more alert information on silence form and silence view pages
  * Add cluster peers DNS refresh job
  + Bug Fixes:
  * Fix unmarshalling of secret URLs in config
  * Do not write groupbyall and groupby when marshaling config
  * Make a copy of firing alerts with EndsAt=0 when flushing
  * Respect regex matchers when recreating silences in UI
  * Change DefaultGlobalConfig to a function in Alertmanager configuration
  * Fix email template typo in alert-warning style
  * Fix silence redirect on silence creation UI page
  * Add missing callback_id parameter in Slack notifier
  * Throw error if no auth mechanism matches in email notifier
  * Use quoted-printable transfer encoding for the email notifier
  * Do not merge expired gossip messages
  * Fix "PLAIN" auth during notification via smtp-over-tls on port 465
  * [amtool] Support for assuming first label is alertname in silence add and query
  * [amtool] Support assuming first label is alertname in alert query with matchers
  * [amtool] Fix config path check in amtool
  * [amtool] Fix rfc3339 example texts
  * [amtool] Fixed issue with loading path of a default configs
- Update to 0.15.3
  + Bug Fixes:
  * Fix alert merging supporting both empty and set EndsAt property for firing alerts send by Prometheus
- Update to 0.15.2:
  + Enhancements:
  * [amtool] Add support for stdin to check-config
  * Log PagerDuty v1 response on BadRequest
  + Bug Fixes:
  * Correctly encode query strings in notifiers (#1516)
  * Add cache control headers to the API responses to avoid IE caching
  * Avoid listener blocking on unsubscribe
  * Fix a bunch of unhandled errors
  * Update PagerDuty API V2 to send full details on resolve
  * Validate URLs at config load time
  * Fix Settle() interval
  * Fix email to be green if only none firing
  * Handle errors in notify
  * Fix templating of hipchat room id
- Update to 0.15.1:
  + Bug Fixes:
  * Fix email template typo in alert-warning style
  * Fix regression in Pager Duty config
  * Catch templating errors in Wechat Notify
  * Fail when no private address can be found for cluster
  * Make sure we don't miss the first pushPull when joining cluster
  * Fix concurrent read and wirte group error in dispatch
- Update to 0.15.0:
  + [amtool] Update silence add and update flags
  + Replace deprecated InstrumentHandle
  + Validate Slack field config and only allow the necessary input
  + Remove legacy alert ingest endpoint
  + Move to memberlist as underlying gossip protocol including cluster flag changes from --mesh.xxx to --cluster.xxx
  + Move Alertmanager working directory in Docker image to /etc/alertmanager
  + The default group by is no labels.
  + Features:
  * [amtool] Filter alerts by receiver
  * Wait for mesh to settle before sending alerts
  * [amtool] Support basic auth in alertmanager url
  * Make HTTP clients used for integrations configurable
  + Enhancements:
  * Support receiving alerts with end time and zero start time
  * Sort dispatched alerts by job+instance
  * Support alert query filters active and unprocessed
  * [amtool] Expose alert query flags --active and --unprocessed
  * Add Slack actions to notifications
  + Bug Fixes:
  * Register nflog snapShotSize metric
  * Sort alerts in correct order before flushing to notifiers
  * Don't reset initial wait timer if flush is in-progress
  * Fix resolved alerts still inhibiting
  * Template wechat config fields
  * Notify resolved alerts properly
  * Fix parsing for label values with commas
  * Hide sensitive Wechat configuration
  * Prepopulate matchers when recreating a silence
  * Fix wechat panic
  * Allow empty matchers in silences/filtering
  * Properly configure HTTP client for Wechat integration</changelog>
  <changelog author="jan.fajerski@suse.com" date="1555416000">- Update to 0.16.2
  + Bug Fixes:
  * Redact notifier URL from logs to not leak secrets embedded in the URL
  * Allow sending of unauthenticated SMTP requests when smtp_auth_username is not supplied</changelog>
  <changelog author="jan.fajerski@suse.com" date="1564747200">- Add network-online (Wants and After) dependency to systemd unit bsc#1143913</changelog>
  <changelog author="elimat@opensuse.org" date="1595073600">- Update to 0.21.0
  + Changes:
  * [HipChat] Remove HipChat integration as it is end-of-life. #2282
  * [amtool] Remove default assignment of environment variables. #2161
  * [PagerDuty] Enforce 512KB event size limit. #2225
  + Enhancements:
  * [amtool] Add cluster command to show cluster and peer statuses. #2256
  * Add redirection from / to the routes prefix when it isn't empty. #2235
  * [Webhook] Add max_alerts option to limit the number of alerts included in the payload. #2274
  * Improve logs for API v2, notifications and clustering. #2177 #2188 #2260 #2261 #2273
  + Bugfixes:
  * Fix child routes not inheriting their parent route's grouping when group_by: [...]. #2154
  * [UI] Fix the receiver selector in the Alerts page when the receiver name contains regular expression metacharacters such as +. #2090
  * Fix error message about start and end time validation. #2173
  * Fix a potential race condition in dispatcher. #2208
  * [API v2] Return an empty array of peers when the clustering is disabled. #2203
  * Fix the registration of alertmanager_dispatcher_aggregation_groups and alertmanager_dispatcher_alert_processing_duration_seconds metrics. #2200
  * Always retry notifications with back-off. #2290
- Run spec-cleaner
- Remove rpm group
- Update to build with go1.14 for Factory (Tumbleweed)
- Refresh example config from upstream</changelog>
  <changelog author="elimat@opensuse.org" date="1598616000">- Fix permissions for /var/lib/prometheus to match
  golang-github-prometheus-prometheus package. Otherwise the install check will
  fail.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604059200">- Fix building amtool (bsc#1176943)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update packaging
  * Remove systemd and shadow hard requirements
  * use the system user provided by the system-user-prometheus subpackge
  * add 'prometheus-alertmanager' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1606737600">- Exclude s390 architecture</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus-alertmanager.service</changelog>
  <changelog author="ecsos@opensuse.org" date="1646308800">- Update to version 0.23.0:
  * Release 0.23.0
  * Release 0.23.0-rc.0
  * amtool: Detect version drift and warn users (#2672)
  * Add ability to skip TLS verification for amtool (#2663)
  * Fix empty isEqual in amtool. (#2668)
  * Fix main tests (#2670)
  * cli: add new template render command (#2538)
  * OpsGenie: refer to alert instead of incident (#2609)
  * Docs: target_match and source_match are DEPRECATED (#2665)
  * Fix test not waiting for cluster member to be ready
- Add go_modules to _service.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646913600">- Update vendor tarball with prometheus/client_golang 1.11.1
  (bsc#1196338, jsc#SLE-24077)
  + Added 0002-Update-prometheus-client-to-version-1.11.1.patch
- Use %autosetup macro</changelog>
  <changelog author="witold.bedyk@suse.com" date="1649419200">- Update required Go version to 1.16</changelog>
  <changelog author="witold.bedyk@suse.com" date="1658232000">- Do not include sources (bsc#1200725)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678449600">- Prevent authentication bypass via cache poisoning
  (bsc#1208051, CVE-2022-46146)
- Add 0003-Update-prometheus-exporter-toolkit-to-0.7.3.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1700568000">- Rebase 0001-Default-settings.patch
- Drop 0002-Update-prometheus-client-to-version-1.11.1.patch
  fixed upstream (now uses v1.15.1)
- Drop 0003-Update-prometheus-exporter-toolkit-to-0.7.3.patch
  fixed upstream (now uses v0.10.0)
- Add 0002-Set-build-flags.patch
- Require Go 1.20 or newer for building
- Remove not used build flags
- Create position independent executables (PIE)
- Disable striping the binaries only for SLE 15 SP3
- Add System/Monitoring group tag
- Rework service file to use obscpio
  * run tar and recompress services at buildtime
  * do not generate automatically changelog entries
- Update to version 0.26.0 (jsc#PED-7353):
  https://github.com/prometheus/alertmanager/releases/tag/v0.26.0
  * (CVE-2023-40577, bsc#1218838): Fix stored XSS via the
    /api/v1/alerts endpoint in the Alertmanager UI
  * Configuration: Fix empty list of receivers and inhibit_rules
    would cause the alertmanager to crash
  * Templating: Fixed a race condition when using the title
    function. It is now race-safe
  * API: Fixed duplicate receiver names in the api/v2/receivers API
    endpoint
  * API: Attempting to delete a silence now returns the correct
    status code, 404 instead of 500
  * Clustering: Fixes a panic when tls_client_config is empty
  * Webhook: url is now marked as a secret. It will no longer show
    up in the logs as clear-text
  * Metrics: New label reason for
    alertmanager_notifications_failed_total metric to indicate the
    type of error of the alert delivery
  * Clustering: New flag --cluster.label, to help to block any
    traffic that is not meant for the cluster
  * Integrations: Add Microsoft Teams as a supported integration
- Update to version 0.25.0:
  https://github.com/prometheus/alertmanager/releases/tag/v0.25.0
  * Fail configuration loading if api_key and api_key_file are
    defined at the same time
  * Fix the alertmanager_alerts metric to avoid counting resolved
    alerts as active. Also added a new alertmanager_marked_alerts
    metric that retain the old behavior
  * Trim contents of Slack API URLs when reading from files
  * amtool: Avoid panic when the label value matcher is empty
  * Fail configuration loading if api_url is empty for OpsGenie
  * Fix email template for resolved notifications
  * Add proxy_url support for OAuth2 in HTTP client configuration
  * Reload TLS certificate and key from disk when updated
  * Add Discord integration
  * Add Webex integration
  * Add min_version support to select the minimum TLS version in
    HTTP client configuration
  * Add max_version support to select the maximum TLS version in
    HTTP client configuration
  * Emit warning logs when truncating messages in notifications
  * Support HEAD method for the /-/healty and /-/ready endpoints
  * Add support for reading global and local SMTP passwords from
    files
  * UI: Add 'Link' button to alerts in list
  * UI: Allow to choose the first day of the week as Sunday or
    Monday
- Update to version 0.24.0:
  https://github.com/prometheus/alertmanager/releases/tag/v0.24.0
  * Fix HTTP client configuration for the SNS receiver
  * Fix unclosed file descriptor after reading the silences
    snapshot file
  * Fix field names for mute_time_intervals in JSON marshaling
  * Ensure that the root route doesn't have any matchers
  * Truncate the message's title to 1024 chars to avoid hitting
    Slack limits
  * Fix the default HTML email template (email.default.html) to
    match with the canonical source
  * Detect SNS FIFO topic based on the rendered value
  * Avoid deleting and recreating a silence when an update is
    possible
  * api/v2: Return 200 OK when deleting an expired silence
  * amtool: Fix the silence's end date when adding a silence. The
    end date is (start date + duration) while it used to be
    (current time + duration). The new behavior is consistent with
    the update operation
  * Add the /api/v2 prefix to all endpoints in the OpenAPI
    specification and generated client code
  * Add --cluster.tls-config experimental flag to secure cluster
    traffic via mutual TLS
  * Add Telegram integration</changelog>
  <changelog author="witold.bedyk@suse.com" date="1702296000">- Do not create PIE for s390x architecture</changelog>
  <changelog author="witold.bedyk@suse.com" date="1709035200">- Use %patch -P N instead of deprecated %patchN</changelog>
</package>
<package pkgid="c48d28e07fc2fb04d60d3ccadb983e342ef62f5e5579a5c42204a3e60f5c68bc" name="golang-github-prometheus-alertmanager" arch="s390x">
  <version epoch="0" ver="0.26.0" rel="150100.4.22.1"/>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.13.0
  See https://github.com/prometheus/alertmanager/releases</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521028800">- spec: fix argument for %fdupes
- Update to 0.14.0:
  + Enhancements:
  * Allow templating PagerDuty receiver severity
  * Include receiver name in failed notifications log messages
  * Add mesh metrics
  + Bug fixes:
  * Don't notify of resolved alerts if none were reported firing
  * Notify only when new firing alerts are added
  * Don't count alerts with EndTime in the future as resolved</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521115200">- fix config token in alermanager.yml hipchat_url -&gt; hipchat_api_url</changelog>
  <changelog author="jan.fajerski@suse.com" date="1549627200">- Update to 0.16.1:
  + Bug Fixes:
  * Do not populate cluster info if clustering is disabled in API v2
- Update to 0.16.0:
  + Deprecate API v1
  + Remove api/v1/alerts/groups GET endpoint
  + Revert Alertmanager working directory changes in Docker image back to /alertmanager
  + Using the recommended label syntax for maintainer in Dockerfile
  + Change alertmanager_notifications_total to count attempted notifications, not only successful ones (#1578)
  + Run as nobody inside container
  + Support w for weeks when creating silences, remove y for year
  + Features:
  * Introduce OpenAPI generated API v2
  * Lookup parts in strings using regexp.MatchString in templates
  * Support image/thumb url in attachment in Slack notifier
  * Support custom TLS certificates for the email notifier
  * Add support for images and links in the PagerDuty notification config
  * Add support for grouping by all labels
  * [amtool] Add timeout support to amtool commands
  * [amtool] Added config routes tools for vizualization and testing routes
  * [amtool] Support adding alerts using amtool
  + Enhancements:
  * Add support for --log.format
  * Add CORS support to API v2
  * Support HTML, URL title and custom sounds for Pushover
  * Update Alert compact view
  * Support adding custom fields to VictorOps notifications
  * Add help link in UI to Alertmanager documentation
  * Enforce HTTP or HTTPS URLs in Alertmanager config
  * Make OpsGenie API Key a templated string
  * Add name, value and SlackConfirmationField to action in Slack notifier
  * Show more alert information on silence form and silence view pages
  * Add cluster peers DNS refresh job
  + Bug Fixes:
  * Fix unmarshalling of secret URLs in config
  * Do not write groupbyall and groupby when marshaling config
  * Make a copy of firing alerts with EndsAt=0 when flushing
  * Respect regex matchers when recreating silences in UI
  * Change DefaultGlobalConfig to a function in Alertmanager configuration
  * Fix email template typo in alert-warning style
  * Fix silence redirect on silence creation UI page
  * Add missing callback_id parameter in Slack notifier
  * Throw error if no auth mechanism matches in email notifier
  * Use quoted-printable transfer encoding for the email notifier
  * Do not merge expired gossip messages
  * Fix "PLAIN" auth during notification via smtp-over-tls on port 465
  * [amtool] Support for assuming first label is alertname in silence add and query
  * [amtool] Support assuming first label is alertname in alert query with matchers
  * [amtool] Fix config path check in amtool
  * [amtool] Fix rfc3339 example texts
  * [amtool] Fixed issue with loading path of a default configs
- Update to 0.15.3
  + Bug Fixes:
  * Fix alert merging supporting both empty and set EndsAt property for firing alerts send by Prometheus
- Update to 0.15.2:
  + Enhancements:
  * [amtool] Add support for stdin to check-config
  * Log PagerDuty v1 response on BadRequest
  + Bug Fixes:
  * Correctly encode query strings in notifiers (#1516)
  * Add cache control headers to the API responses to avoid IE caching
  * Avoid listener blocking on unsubscribe
  * Fix a bunch of unhandled errors
  * Update PagerDuty API V2 to send full details on resolve
  * Validate URLs at config load time
  * Fix Settle() interval
  * Fix email to be green if only none firing
  * Handle errors in notify
  * Fix templating of hipchat room id
- Update to 0.15.1:
  + Bug Fixes:
  * Fix email template typo in alert-warning style
  * Fix regression in Pager Duty config
  * Catch templating errors in Wechat Notify
  * Fail when no private address can be found for cluster
  * Make sure we don't miss the first pushPull when joining cluster
  * Fix concurrent read and wirte group error in dispatch
- Update to 0.15.0:
  + [amtool] Update silence add and update flags
  + Replace deprecated InstrumentHandle
  + Validate Slack field config and only allow the necessary input
  + Remove legacy alert ingest endpoint
  + Move to memberlist as underlying gossip protocol including cluster flag changes from --mesh.xxx to --cluster.xxx
  + Move Alertmanager working directory in Docker image to /etc/alertmanager
  + The default group by is no labels.
  + Features:
  * [amtool] Filter alerts by receiver
  * Wait for mesh to settle before sending alerts
  * [amtool] Support basic auth in alertmanager url
  * Make HTTP clients used for integrations configurable
  + Enhancements:
  * Support receiving alerts with end time and zero start time
  * Sort dispatched alerts by job+instance
  * Support alert query filters active and unprocessed
  * [amtool] Expose alert query flags --active and --unprocessed
  * Add Slack actions to notifications
  + Bug Fixes:
  * Register nflog snapShotSize metric
  * Sort alerts in correct order before flushing to notifiers
  * Don't reset initial wait timer if flush is in-progress
  * Fix resolved alerts still inhibiting
  * Template wechat config fields
  * Notify resolved alerts properly
  * Fix parsing for label values with commas
  * Hide sensitive Wechat configuration
  * Prepopulate matchers when recreating a silence
  * Fix wechat panic
  * Allow empty matchers in silences/filtering
  * Properly configure HTTP client for Wechat integration</changelog>
  <changelog author="jan.fajerski@suse.com" date="1555416000">- Update to 0.16.2
  + Bug Fixes:
  * Redact notifier URL from logs to not leak secrets embedded in the URL
  * Allow sending of unauthenticated SMTP requests when smtp_auth_username is not supplied</changelog>
  <changelog author="jan.fajerski@suse.com" date="1564747200">- Add network-online (Wants and After) dependency to systemd unit bsc#1143913</changelog>
  <changelog author="elimat@opensuse.org" date="1595073600">- Update to 0.21.0
  + Changes:
  * [HipChat] Remove HipChat integration as it is end-of-life. #2282
  * [amtool] Remove default assignment of environment variables. #2161
  * [PagerDuty] Enforce 512KB event size limit. #2225
  + Enhancements:
  * [amtool] Add cluster command to show cluster and peer statuses. #2256
  * Add redirection from / to the routes prefix when it isn't empty. #2235
  * [Webhook] Add max_alerts option to limit the number of alerts included in the payload. #2274
  * Improve logs for API v2, notifications and clustering. #2177 #2188 #2260 #2261 #2273
  + Bugfixes:
  * Fix child routes not inheriting their parent route's grouping when group_by: [...]. #2154
  * [UI] Fix the receiver selector in the Alerts page when the receiver name contains regular expression metacharacters such as +. #2090
  * Fix error message about start and end time validation. #2173
  * Fix a potential race condition in dispatcher. #2208
  * [API v2] Return an empty array of peers when the clustering is disabled. #2203
  * Fix the registration of alertmanager_dispatcher_aggregation_groups and alertmanager_dispatcher_alert_processing_duration_seconds metrics. #2200
  * Always retry notifications with back-off. #2290
- Run spec-cleaner
- Remove rpm group
- Update to build with go1.14 for Factory (Tumbleweed)
- Refresh example config from upstream</changelog>
  <changelog author="elimat@opensuse.org" date="1598616000">- Fix permissions for /var/lib/prometheus to match
  golang-github-prometheus-prometheus package. Otherwise the install check will
  fail.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604059200">- Fix building amtool (bsc#1176943)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update packaging
  * Remove systemd and shadow hard requirements
  * use the system user provided by the system-user-prometheus subpackge
  * add 'prometheus-alertmanager' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1606737600">- Exclude s390 architecture</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus-alertmanager.service</changelog>
  <changelog author="ecsos@opensuse.org" date="1646308800">- Update to version 0.23.0:
  * Release 0.23.0
  * Release 0.23.0-rc.0
  * amtool: Detect version drift and warn users (#2672)
  * Add ability to skip TLS verification for amtool (#2663)
  * Fix empty isEqual in amtool. (#2668)
  * Fix main tests (#2670)
  * cli: add new template render command (#2538)
  * OpsGenie: refer to alert instead of incident (#2609)
  * Docs: target_match and source_match are DEPRECATED (#2665)
  * Fix test not waiting for cluster member to be ready
- Add go_modules to _service.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646913600">- Update vendor tarball with prometheus/client_golang 1.11.1
  (bsc#1196338, jsc#SLE-24077)
  + Added 0002-Update-prometheus-client-to-version-1.11.1.patch
- Use %autosetup macro</changelog>
  <changelog author="witold.bedyk@suse.com" date="1649419200">- Update required Go version to 1.16</changelog>
  <changelog author="witold.bedyk@suse.com" date="1658232000">- Do not include sources (bsc#1200725)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678449600">- Prevent authentication bypass via cache poisoning
  (bsc#1208051, CVE-2022-46146)
- Add 0003-Update-prometheus-exporter-toolkit-to-0.7.3.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1700568000">- Rebase 0001-Default-settings.patch
- Drop 0002-Update-prometheus-client-to-version-1.11.1.patch
  fixed upstream (now uses v1.15.1)
- Drop 0003-Update-prometheus-exporter-toolkit-to-0.7.3.patch
  fixed upstream (now uses v0.10.0)
- Add 0002-Set-build-flags.patch
- Require Go 1.20 or newer for building
- Remove not used build flags
- Create position independent executables (PIE)
- Disable striping the binaries only for SLE 15 SP3
- Add System/Monitoring group tag
- Rework service file to use obscpio
  * run tar and recompress services at buildtime
  * do not generate automatically changelog entries
- Update to version 0.26.0 (jsc#PED-7353):
  https://github.com/prometheus/alertmanager/releases/tag/v0.26.0
  * (CVE-2023-40577, bsc#1218838): Fix stored XSS via the
    /api/v1/alerts endpoint in the Alertmanager UI
  * Configuration: Fix empty list of receivers and inhibit_rules
    would cause the alertmanager to crash
  * Templating: Fixed a race condition when using the title
    function. It is now race-safe
  * API: Fixed duplicate receiver names in the api/v2/receivers API
    endpoint
  * API: Attempting to delete a silence now returns the correct
    status code, 404 instead of 500
  * Clustering: Fixes a panic when tls_client_config is empty
  * Webhook: url is now marked as a secret. It will no longer show
    up in the logs as clear-text
  * Metrics: New label reason for
    alertmanager_notifications_failed_total metric to indicate the
    type of error of the alert delivery
  * Clustering: New flag --cluster.label, to help to block any
    traffic that is not meant for the cluster
  * Integrations: Add Microsoft Teams as a supported integration
- Update to version 0.25.0:
  https://github.com/prometheus/alertmanager/releases/tag/v0.25.0
  * Fail configuration loading if api_key and api_key_file are
    defined at the same time
  * Fix the alertmanager_alerts metric to avoid counting resolved
    alerts as active. Also added a new alertmanager_marked_alerts
    metric that retain the old behavior
  * Trim contents of Slack API URLs when reading from files
  * amtool: Avoid panic when the label value matcher is empty
  * Fail configuration loading if api_url is empty for OpsGenie
  * Fix email template for resolved notifications
  * Add proxy_url support for OAuth2 in HTTP client configuration
  * Reload TLS certificate and key from disk when updated
  * Add Discord integration
  * Add Webex integration
  * Add min_version support to select the minimum TLS version in
    HTTP client configuration
  * Add max_version support to select the maximum TLS version in
    HTTP client configuration
  * Emit warning logs when truncating messages in notifications
  * Support HEAD method for the /-/healty and /-/ready endpoints
  * Add support for reading global and local SMTP passwords from
    files
  * UI: Add 'Link' button to alerts in list
  * UI: Allow to choose the first day of the week as Sunday or
    Monday
- Update to version 0.24.0:
  https://github.com/prometheus/alertmanager/releases/tag/v0.24.0
  * Fix HTTP client configuration for the SNS receiver
  * Fix unclosed file descriptor after reading the silences
    snapshot file
  * Fix field names for mute_time_intervals in JSON marshaling
  * Ensure that the root route doesn't have any matchers
  * Truncate the message's title to 1024 chars to avoid hitting
    Slack limits
  * Fix the default HTML email template (email.default.html) to
    match with the canonical source
  * Detect SNS FIFO topic based on the rendered value
  * Avoid deleting and recreating a silence when an update is
    possible
  * api/v2: Return 200 OK when deleting an expired silence
  * amtool: Fix the silence's end date when adding a silence. The
    end date is (start date + duration) while it used to be
    (current time + duration). The new behavior is consistent with
    the update operation
  * Add the /api/v2 prefix to all endpoints in the OpenAPI
    specification and generated client code
  * Add --cluster.tls-config experimental flag to secure cluster
    traffic via mutual TLS
  * Add Telegram integration</changelog>
  <changelog author="witold.bedyk@suse.com" date="1702296000">- Do not create PIE for s390x architecture</changelog>
  <changelog author="witold.bedyk@suse.com" date="1709035200">- Use %patch -P N instead of deprecated %patchN</changelog>
</package>
<package pkgid="33ca474f223492769da910e26d6137f36be560a7e5ad3396ebe1f21e20c42d13" name="golang-github-prometheus-alertmanager" arch="src">
  <version epoch="0" ver="0.26.0" rel="150100.4.22.1"/>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.13.0
  See https://github.com/prometheus/alertmanager/releases</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521028800">- spec: fix argument for %fdupes
- Update to 0.14.0:
  + Enhancements:
  * Allow templating PagerDuty receiver severity
  * Include receiver name in failed notifications log messages
  * Add mesh metrics
  + Bug fixes:
  * Don't notify of resolved alerts if none were reported firing
  * Notify only when new firing alerts are added
  * Don't count alerts with EndTime in the future as resolved</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521115200">- fix config token in alermanager.yml hipchat_url -&gt; hipchat_api_url</changelog>
  <changelog author="jan.fajerski@suse.com" date="1549627200">- Update to 0.16.1:
  + Bug Fixes:
  * Do not populate cluster info if clustering is disabled in API v2
- Update to 0.16.0:
  + Deprecate API v1
  + Remove api/v1/alerts/groups GET endpoint
  + Revert Alertmanager working directory changes in Docker image back to /alertmanager
  + Using the recommended label syntax for maintainer in Dockerfile
  + Change alertmanager_notifications_total to count attempted notifications, not only successful ones (#1578)
  + Run as nobody inside container
  + Support w for weeks when creating silences, remove y for year
  + Features:
  * Introduce OpenAPI generated API v2
  * Lookup parts in strings using regexp.MatchString in templates
  * Support image/thumb url in attachment in Slack notifier
  * Support custom TLS certificates for the email notifier
  * Add support for images and links in the PagerDuty notification config
  * Add support for grouping by all labels
  * [amtool] Add timeout support to amtool commands
  * [amtool] Added config routes tools for vizualization and testing routes
  * [amtool] Support adding alerts using amtool
  + Enhancements:
  * Add support for --log.format
  * Add CORS support to API v2
  * Support HTML, URL title and custom sounds for Pushover
  * Update Alert compact view
  * Support adding custom fields to VictorOps notifications
  * Add help link in UI to Alertmanager documentation
  * Enforce HTTP or HTTPS URLs in Alertmanager config
  * Make OpsGenie API Key a templated string
  * Add name, value and SlackConfirmationField to action in Slack notifier
  * Show more alert information on silence form and silence view pages
  * Add cluster peers DNS refresh job
  + Bug Fixes:
  * Fix unmarshalling of secret URLs in config
  * Do not write groupbyall and groupby when marshaling config
  * Make a copy of firing alerts with EndsAt=0 when flushing
  * Respect regex matchers when recreating silences in UI
  * Change DefaultGlobalConfig to a function in Alertmanager configuration
  * Fix email template typo in alert-warning style
  * Fix silence redirect on silence creation UI page
  * Add missing callback_id parameter in Slack notifier
  * Throw error if no auth mechanism matches in email notifier
  * Use quoted-printable transfer encoding for the email notifier
  * Do not merge expired gossip messages
  * Fix "PLAIN" auth during notification via smtp-over-tls on port 465
  * [amtool] Support for assuming first label is alertname in silence add and query
  * [amtool] Support assuming first label is alertname in alert query with matchers
  * [amtool] Fix config path check in amtool
  * [amtool] Fix rfc3339 example texts
  * [amtool] Fixed issue with loading path of a default configs
- Update to 0.15.3
  + Bug Fixes:
  * Fix alert merging supporting both empty and set EndsAt property for firing alerts send by Prometheus
- Update to 0.15.2:
  + Enhancements:
  * [amtool] Add support for stdin to check-config
  * Log PagerDuty v1 response on BadRequest
  + Bug Fixes:
  * Correctly encode query strings in notifiers (#1516)
  * Add cache control headers to the API responses to avoid IE caching
  * Avoid listener blocking on unsubscribe
  * Fix a bunch of unhandled errors
  * Update PagerDuty API V2 to send full details on resolve
  * Validate URLs at config load time
  * Fix Settle() interval
  * Fix email to be green if only none firing
  * Handle errors in notify
  * Fix templating of hipchat room id
- Update to 0.15.1:
  + Bug Fixes:
  * Fix email template typo in alert-warning style
  * Fix regression in Pager Duty config
  * Catch templating errors in Wechat Notify
  * Fail when no private address can be found for cluster
  * Make sure we don't miss the first pushPull when joining cluster
  * Fix concurrent read and wirte group error in dispatch
- Update to 0.15.0:
  + [amtool] Update silence add and update flags
  + Replace deprecated InstrumentHandle
  + Validate Slack field config and only allow the necessary input
  + Remove legacy alert ingest endpoint
  + Move to memberlist as underlying gossip protocol including cluster flag changes from --mesh.xxx to --cluster.xxx
  + Move Alertmanager working directory in Docker image to /etc/alertmanager
  + The default group by is no labels.
  + Features:
  * [amtool] Filter alerts by receiver
  * Wait for mesh to settle before sending alerts
  * [amtool] Support basic auth in alertmanager url
  * Make HTTP clients used for integrations configurable
  + Enhancements:
  * Support receiving alerts with end time and zero start time
  * Sort dispatched alerts by job+instance
  * Support alert query filters active and unprocessed
  * [amtool] Expose alert query flags --active and --unprocessed
  * Add Slack actions to notifications
  + Bug Fixes:
  * Register nflog snapShotSize metric
  * Sort alerts in correct order before flushing to notifiers
  * Don't reset initial wait timer if flush is in-progress
  * Fix resolved alerts still inhibiting
  * Template wechat config fields
  * Notify resolved alerts properly
  * Fix parsing for label values with commas
  * Hide sensitive Wechat configuration
  * Prepopulate matchers when recreating a silence
  * Fix wechat panic
  * Allow empty matchers in silences/filtering
  * Properly configure HTTP client for Wechat integration</changelog>
  <changelog author="jan.fajerski@suse.com" date="1555416000">- Update to 0.16.2
  + Bug Fixes:
  * Redact notifier URL from logs to not leak secrets embedded in the URL
  * Allow sending of unauthenticated SMTP requests when smtp_auth_username is not supplied</changelog>
  <changelog author="jan.fajerski@suse.com" date="1564747200">- Add network-online (Wants and After) dependency to systemd unit bsc#1143913</changelog>
  <changelog author="elimat@opensuse.org" date="1595073600">- Update to 0.21.0
  + Changes:
  * [HipChat] Remove HipChat integration as it is end-of-life. #2282
  * [amtool] Remove default assignment of environment variables. #2161
  * [PagerDuty] Enforce 512KB event size limit. #2225
  + Enhancements:
  * [amtool] Add cluster command to show cluster and peer statuses. #2256
  * Add redirection from / to the routes prefix when it isn't empty. #2235
  * [Webhook] Add max_alerts option to limit the number of alerts included in the payload. #2274
  * Improve logs for API v2, notifications and clustering. #2177 #2188 #2260 #2261 #2273
  + Bugfixes:
  * Fix child routes not inheriting their parent route's grouping when group_by: [...]. #2154
  * [UI] Fix the receiver selector in the Alerts page when the receiver name contains regular expression metacharacters such as +. #2090
  * Fix error message about start and end time validation. #2173
  * Fix a potential race condition in dispatcher. #2208
  * [API v2] Return an empty array of peers when the clustering is disabled. #2203
  * Fix the registration of alertmanager_dispatcher_aggregation_groups and alertmanager_dispatcher_alert_processing_duration_seconds metrics. #2200
  * Always retry notifications with back-off. #2290
- Run spec-cleaner
- Remove rpm group
- Update to build with go1.14 for Factory (Tumbleweed)
- Refresh example config from upstream</changelog>
  <changelog author="elimat@opensuse.org" date="1598616000">- Fix permissions for /var/lib/prometheus to match
  golang-github-prometheus-prometheus package. Otherwise the install check will
  fail.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604059200">- Fix building amtool (bsc#1176943)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update packaging
  * Remove systemd and shadow hard requirements
  * use the system user provided by the system-user-prometheus subpackge
  * add 'prometheus-alertmanager' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1606737600">- Exclude s390 architecture</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus-alertmanager.service</changelog>
  <changelog author="ecsos@opensuse.org" date="1646308800">- Update to version 0.23.0:
  * Release 0.23.0
  * Release 0.23.0-rc.0
  * amtool: Detect version drift and warn users (#2672)
  * Add ability to skip TLS verification for amtool (#2663)
  * Fix empty isEqual in amtool. (#2668)
  * Fix main tests (#2670)
  * cli: add new template render command (#2538)
  * OpsGenie: refer to alert instead of incident (#2609)
  * Docs: target_match and source_match are DEPRECATED (#2665)
  * Fix test not waiting for cluster member to be ready
- Add go_modules to _service.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646913600">- Update vendor tarball with prometheus/client_golang 1.11.1
  (bsc#1196338, jsc#SLE-24077)
  + Added 0002-Update-prometheus-client-to-version-1.11.1.patch
- Use %autosetup macro</changelog>
  <changelog author="witold.bedyk@suse.com" date="1649419200">- Update required Go version to 1.16</changelog>
  <changelog author="witold.bedyk@suse.com" date="1658232000">- Do not include sources (bsc#1200725)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678449600">- Prevent authentication bypass via cache poisoning
  (bsc#1208051, CVE-2022-46146)
- Add 0003-Update-prometheus-exporter-toolkit-to-0.7.3.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1700568000">- Rebase 0001-Default-settings.patch
- Drop 0002-Update-prometheus-client-to-version-1.11.1.patch
  fixed upstream (now uses v1.15.1)
- Drop 0003-Update-prometheus-exporter-toolkit-to-0.7.3.patch
  fixed upstream (now uses v0.10.0)
- Add 0002-Set-build-flags.patch
- Require Go 1.20 or newer for building
- Remove not used build flags
- Create position independent executables (PIE)
- Disable striping the binaries only for SLE 15 SP3
- Add System/Monitoring group tag
- Rework service file to use obscpio
  * run tar and recompress services at buildtime
  * do not generate automatically changelog entries
- Update to version 0.26.0 (jsc#PED-7353):
  https://github.com/prometheus/alertmanager/releases/tag/v0.26.0
  * (CVE-2023-40577, bsc#1218838): Fix stored XSS via the
    /api/v1/alerts endpoint in the Alertmanager UI
  * Configuration: Fix empty list of receivers and inhibit_rules
    would cause the alertmanager to crash
  * Templating: Fixed a race condition when using the title
    function. It is now race-safe
  * API: Fixed duplicate receiver names in the api/v2/receivers API
    endpoint
  * API: Attempting to delete a silence now returns the correct
    status code, 404 instead of 500
  * Clustering: Fixes a panic when tls_client_config is empty
  * Webhook: url is now marked as a secret. It will no longer show
    up in the logs as clear-text
  * Metrics: New label reason for
    alertmanager_notifications_failed_total metric to indicate the
    type of error of the alert delivery
  * Clustering: New flag --cluster.label, to help to block any
    traffic that is not meant for the cluster
  * Integrations: Add Microsoft Teams as a supported integration
- Update to version 0.25.0:
  https://github.com/prometheus/alertmanager/releases/tag/v0.25.0
  * Fail configuration loading if api_key and api_key_file are
    defined at the same time
  * Fix the alertmanager_alerts metric to avoid counting resolved
    alerts as active. Also added a new alertmanager_marked_alerts
    metric that retain the old behavior
  * Trim contents of Slack API URLs when reading from files
  * amtool: Avoid panic when the label value matcher is empty
  * Fail configuration loading if api_url is empty for OpsGenie
  * Fix email template for resolved notifications
  * Add proxy_url support for OAuth2 in HTTP client configuration
  * Reload TLS certificate and key from disk when updated
  * Add Discord integration
  * Add Webex integration
  * Add min_version support to select the minimum TLS version in
    HTTP client configuration
  * Add max_version support to select the maximum TLS version in
    HTTP client configuration
  * Emit warning logs when truncating messages in notifications
  * Support HEAD method for the /-/healty and /-/ready endpoints
  * Add support for reading global and local SMTP passwords from
    files
  * UI: Add 'Link' button to alerts in list
  * UI: Allow to choose the first day of the week as Sunday or
    Monday
- Update to version 0.24.0:
  https://github.com/prometheus/alertmanager/releases/tag/v0.24.0
  * Fix HTTP client configuration for the SNS receiver
  * Fix unclosed file descriptor after reading the silences
    snapshot file
  * Fix field names for mute_time_intervals in JSON marshaling
  * Ensure that the root route doesn't have any matchers
  * Truncate the message's title to 1024 chars to avoid hitting
    Slack limits
  * Fix the default HTML email template (email.default.html) to
    match with the canonical source
  * Detect SNS FIFO topic based on the rendered value
  * Avoid deleting and recreating a silence when an update is
    possible
  * api/v2: Return 200 OK when deleting an expired silence
  * amtool: Fix the silence's end date when adding a silence. The
    end date is (start date + duration) while it used to be
    (current time + duration). The new behavior is consistent with
    the update operation
  * Add the /api/v2 prefix to all endpoints in the OpenAPI
    specification and generated client code
  * Add --cluster.tls-config experimental flag to secure cluster
    traffic via mutual TLS
  * Add Telegram integration</changelog>
  <changelog author="witold.bedyk@suse.com" date="1702296000">- Do not create PIE for s390x architecture</changelog>
  <changelog author="witold.bedyk@suse.com" date="1709035200">- Use %patch -P N instead of deprecated %patchN</changelog>
</package>
<package pkgid="a960670f83ea3e851a8ba9f30fb977fc5c69ae8b8fda5705ab39112877f39dd5" name="golang-github-prometheus-alertmanager" arch="x86_64">
  <version epoch="0" ver="0.26.0" rel="150100.4.22.1"/>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.13.0
  See https://github.com/prometheus/alertmanager/releases</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521028800">- spec: fix argument for %fdupes
- Update to 0.14.0:
  + Enhancements:
  * Allow templating PagerDuty receiver severity
  * Include receiver name in failed notifications log messages
  * Add mesh metrics
  + Bug fixes:
  * Don't notify of resolved alerts if none were reported firing
  * Notify only when new firing alerts are added
  * Don't count alerts with EndTime in the future as resolved</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521115200">- fix config token in alermanager.yml hipchat_url -&gt; hipchat_api_url</changelog>
  <changelog author="jan.fajerski@suse.com" date="1549627200">- Update to 0.16.1:
  + Bug Fixes:
  * Do not populate cluster info if clustering is disabled in API v2
- Update to 0.16.0:
  + Deprecate API v1
  + Remove api/v1/alerts/groups GET endpoint
  + Revert Alertmanager working directory changes in Docker image back to /alertmanager
  + Using the recommended label syntax for maintainer in Dockerfile
  + Change alertmanager_notifications_total to count attempted notifications, not only successful ones (#1578)
  + Run as nobody inside container
  + Support w for weeks when creating silences, remove y for year
  + Features:
  * Introduce OpenAPI generated API v2
  * Lookup parts in strings using regexp.MatchString in templates
  * Support image/thumb url in attachment in Slack notifier
  * Support custom TLS certificates for the email notifier
  * Add support for images and links in the PagerDuty notification config
  * Add support for grouping by all labels
  * [amtool] Add timeout support to amtool commands
  * [amtool] Added config routes tools for vizualization and testing routes
  * [amtool] Support adding alerts using amtool
  + Enhancements:
  * Add support for --log.format
  * Add CORS support to API v2
  * Support HTML, URL title and custom sounds for Pushover
  * Update Alert compact view
  * Support adding custom fields to VictorOps notifications
  * Add help link in UI to Alertmanager documentation
  * Enforce HTTP or HTTPS URLs in Alertmanager config
  * Make OpsGenie API Key a templated string
  * Add name, value and SlackConfirmationField to action in Slack notifier
  * Show more alert information on silence form and silence view pages
  * Add cluster peers DNS refresh job
  + Bug Fixes:
  * Fix unmarshalling of secret URLs in config
  * Do not write groupbyall and groupby when marshaling config
  * Make a copy of firing alerts with EndsAt=0 when flushing
  * Respect regex matchers when recreating silences in UI
  * Change DefaultGlobalConfig to a function in Alertmanager configuration
  * Fix email template typo in alert-warning style
  * Fix silence redirect on silence creation UI page
  * Add missing callback_id parameter in Slack notifier
  * Throw error if no auth mechanism matches in email notifier
  * Use quoted-printable transfer encoding for the email notifier
  * Do not merge expired gossip messages
  * Fix "PLAIN" auth during notification via smtp-over-tls on port 465
  * [amtool] Support for assuming first label is alertname in silence add and query
  * [amtool] Support assuming first label is alertname in alert query with matchers
  * [amtool] Fix config path check in amtool
  * [amtool] Fix rfc3339 example texts
  * [amtool] Fixed issue with loading path of a default configs
- Update to 0.15.3
  + Bug Fixes:
  * Fix alert merging supporting both empty and set EndsAt property for firing alerts send by Prometheus
- Update to 0.15.2:
  + Enhancements:
  * [amtool] Add support for stdin to check-config
  * Log PagerDuty v1 response on BadRequest
  + Bug Fixes:
  * Correctly encode query strings in notifiers (#1516)
  * Add cache control headers to the API responses to avoid IE caching
  * Avoid listener blocking on unsubscribe
  * Fix a bunch of unhandled errors
  * Update PagerDuty API V2 to send full details on resolve
  * Validate URLs at config load time
  * Fix Settle() interval
  * Fix email to be green if only none firing
  * Handle errors in notify
  * Fix templating of hipchat room id
- Update to 0.15.1:
  + Bug Fixes:
  * Fix email template typo in alert-warning style
  * Fix regression in Pager Duty config
  * Catch templating errors in Wechat Notify
  * Fail when no private address can be found for cluster
  * Make sure we don't miss the first pushPull when joining cluster
  * Fix concurrent read and wirte group error in dispatch
- Update to 0.15.0:
  + [amtool] Update silence add and update flags
  + Replace deprecated InstrumentHandle
  + Validate Slack field config and only allow the necessary input
  + Remove legacy alert ingest endpoint
  + Move to memberlist as underlying gossip protocol including cluster flag changes from --mesh.xxx to --cluster.xxx
  + Move Alertmanager working directory in Docker image to /etc/alertmanager
  + The default group by is no labels.
  + Features:
  * [amtool] Filter alerts by receiver
  * Wait for mesh to settle before sending alerts
  * [amtool] Support basic auth in alertmanager url
  * Make HTTP clients used for integrations configurable
  + Enhancements:
  * Support receiving alerts with end time and zero start time
  * Sort dispatched alerts by job+instance
  * Support alert query filters active and unprocessed
  * [amtool] Expose alert query flags --active and --unprocessed
  * Add Slack actions to notifications
  + Bug Fixes:
  * Register nflog snapShotSize metric
  * Sort alerts in correct order before flushing to notifiers
  * Don't reset initial wait timer if flush is in-progress
  * Fix resolved alerts still inhibiting
  * Template wechat config fields
  * Notify resolved alerts properly
  * Fix parsing for label values with commas
  * Hide sensitive Wechat configuration
  * Prepopulate matchers when recreating a silence
  * Fix wechat panic
  * Allow empty matchers in silences/filtering
  * Properly configure HTTP client for Wechat integration</changelog>
  <changelog author="jan.fajerski@suse.com" date="1555416000">- Update to 0.16.2
  + Bug Fixes:
  * Redact notifier URL from logs to not leak secrets embedded in the URL
  * Allow sending of unauthenticated SMTP requests when smtp_auth_username is not supplied</changelog>
  <changelog author="jan.fajerski@suse.com" date="1564747200">- Add network-online (Wants and After) dependency to systemd unit bsc#1143913</changelog>
  <changelog author="elimat@opensuse.org" date="1595073600">- Update to 0.21.0
  + Changes:
  * [HipChat] Remove HipChat integration as it is end-of-life. #2282
  * [amtool] Remove default assignment of environment variables. #2161
  * [PagerDuty] Enforce 512KB event size limit. #2225
  + Enhancements:
  * [amtool] Add cluster command to show cluster and peer statuses. #2256
  * Add redirection from / to the routes prefix when it isn't empty. #2235
  * [Webhook] Add max_alerts option to limit the number of alerts included in the payload. #2274
  * Improve logs for API v2, notifications and clustering. #2177 #2188 #2260 #2261 #2273
  + Bugfixes:
  * Fix child routes not inheriting their parent route's grouping when group_by: [...]. #2154
  * [UI] Fix the receiver selector in the Alerts page when the receiver name contains regular expression metacharacters such as +. #2090
  * Fix error message about start and end time validation. #2173
  * Fix a potential race condition in dispatcher. #2208
  * [API v2] Return an empty array of peers when the clustering is disabled. #2203
  * Fix the registration of alertmanager_dispatcher_aggregation_groups and alertmanager_dispatcher_alert_processing_duration_seconds metrics. #2200
  * Always retry notifications with back-off. #2290
- Run spec-cleaner
- Remove rpm group
- Update to build with go1.14 for Factory (Tumbleweed)
- Refresh example config from upstream</changelog>
  <changelog author="elimat@opensuse.org" date="1598616000">- Fix permissions for /var/lib/prometheus to match
  golang-github-prometheus-prometheus package. Otherwise the install check will
  fail.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604059200">- Fix building amtool (bsc#1176943)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update packaging
  * Remove systemd and shadow hard requirements
  * use the system user provided by the system-user-prometheus subpackge
  * add 'prometheus-alertmanager' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1606737600">- Exclude s390 architecture</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus-alertmanager.service</changelog>
  <changelog author="ecsos@opensuse.org" date="1646308800">- Update to version 0.23.0:
  * Release 0.23.0
  * Release 0.23.0-rc.0
  * amtool: Detect version drift and warn users (#2672)
  * Add ability to skip TLS verification for amtool (#2663)
  * Fix empty isEqual in amtool. (#2668)
  * Fix main tests (#2670)
  * cli: add new template render command (#2538)
  * OpsGenie: refer to alert instead of incident (#2609)
  * Docs: target_match and source_match are DEPRECATED (#2665)
  * Fix test not waiting for cluster member to be ready
- Add go_modules to _service.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646913600">- Update vendor tarball with prometheus/client_golang 1.11.1
  (bsc#1196338, jsc#SLE-24077)
  + Added 0002-Update-prometheus-client-to-version-1.11.1.patch
- Use %autosetup macro</changelog>
  <changelog author="witold.bedyk@suse.com" date="1649419200">- Update required Go version to 1.16</changelog>
  <changelog author="witold.bedyk@suse.com" date="1658232000">- Do not include sources (bsc#1200725)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678449600">- Prevent authentication bypass via cache poisoning
  (bsc#1208051, CVE-2022-46146)
- Add 0003-Update-prometheus-exporter-toolkit-to-0.7.3.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1700568000">- Rebase 0001-Default-settings.patch
- Drop 0002-Update-prometheus-client-to-version-1.11.1.patch
  fixed upstream (now uses v1.15.1)
- Drop 0003-Update-prometheus-exporter-toolkit-to-0.7.3.patch
  fixed upstream (now uses v0.10.0)
- Add 0002-Set-build-flags.patch
- Require Go 1.20 or newer for building
- Remove not used build flags
- Create position independent executables (PIE)
- Disable striping the binaries only for SLE 15 SP3
- Add System/Monitoring group tag
- Rework service file to use obscpio
  * run tar and recompress services at buildtime
  * do not generate automatically changelog entries
- Update to version 0.26.0 (jsc#PED-7353):
  https://github.com/prometheus/alertmanager/releases/tag/v0.26.0
  * (CVE-2023-40577, bsc#1218838): Fix stored XSS via the
    /api/v1/alerts endpoint in the Alertmanager UI
  * Configuration: Fix empty list of receivers and inhibit_rules
    would cause the alertmanager to crash
  * Templating: Fixed a race condition when using the title
    function. It is now race-safe
  * API: Fixed duplicate receiver names in the api/v2/receivers API
    endpoint
  * API: Attempting to delete a silence now returns the correct
    status code, 404 instead of 500
  * Clustering: Fixes a panic when tls_client_config is empty
  * Webhook: url is now marked as a secret. It will no longer show
    up in the logs as clear-text
  * Metrics: New label reason for
    alertmanager_notifications_failed_total metric to indicate the
    type of error of the alert delivery
  * Clustering: New flag --cluster.label, to help to block any
    traffic that is not meant for the cluster
  * Integrations: Add Microsoft Teams as a supported integration
- Update to version 0.25.0:
  https://github.com/prometheus/alertmanager/releases/tag/v0.25.0
  * Fail configuration loading if api_key and api_key_file are
    defined at the same time
  * Fix the alertmanager_alerts metric to avoid counting resolved
    alerts as active. Also added a new alertmanager_marked_alerts
    metric that retain the old behavior
  * Trim contents of Slack API URLs when reading from files
  * amtool: Avoid panic when the label value matcher is empty
  * Fail configuration loading if api_url is empty for OpsGenie
  * Fix email template for resolved notifications
  * Add proxy_url support for OAuth2 in HTTP client configuration
  * Reload TLS certificate and key from disk when updated
  * Add Discord integration
  * Add Webex integration
  * Add min_version support to select the minimum TLS version in
    HTTP client configuration
  * Add max_version support to select the maximum TLS version in
    HTTP client configuration
  * Emit warning logs when truncating messages in notifications
  * Support HEAD method for the /-/healty and /-/ready endpoints
  * Add support for reading global and local SMTP passwords from
    files
  * UI: Add 'Link' button to alerts in list
  * UI: Allow to choose the first day of the week as Sunday or
    Monday
- Update to version 0.24.0:
  https://github.com/prometheus/alertmanager/releases/tag/v0.24.0
  * Fix HTTP client configuration for the SNS receiver
  * Fix unclosed file descriptor after reading the silences
    snapshot file
  * Fix field names for mute_time_intervals in JSON marshaling
  * Ensure that the root route doesn't have any matchers
  * Truncate the message's title to 1024 chars to avoid hitting
    Slack limits
  * Fix the default HTML email template (email.default.html) to
    match with the canonical source
  * Detect SNS FIFO topic based on the rendered value
  * Avoid deleting and recreating a silence when an update is
    possible
  * api/v2: Return 200 OK when deleting an expired silence
  * amtool: Fix the silence's end date when adding a silence. The
    end date is (start date + duration) while it used to be
    (current time + duration). The new behavior is consistent with
    the update operation
  * Add the /api/v2 prefix to all endpoints in the OpenAPI
    specification and generated client code
  * Add --cluster.tls-config experimental flag to secure cluster
    traffic via mutual TLS
  * Add Telegram integration</changelog>
  <changelog author="witold.bedyk@suse.com" date="1702296000">- Do not create PIE for s390x architecture</changelog>
  <changelog author="witold.bedyk@suse.com" date="1709035200">- Use %patch -P N instead of deprecated %patchN</changelog>
</package>
<package pkgid="d594de6d64d18b251cc8604bd848c654865b4483f846f99892f1833a9959cc27" name="golang-github-prometheus-node_exporter" arch="aarch64">
  <version epoch="0" ver="1.7.0" rel="150100.3.29.1"/>
  <changelog author="witold.bedyk@suse.com" date="1614254400">- Migrate to obs_scm
- Migrate to go_modules
- Update to 1.1.1
  * Bug fixes
    + Fix ineffassign issue #1957
    + Fix some noisy log lines #1962
- Update to 1.1.0
  * Changes
    + Improve filter flag names #1743
    + Add btrfs and powersupplyclass to list of exporters enabled by default #1897
  * Features
    + Add fibre channel collector #1786
    + Expose cpu bugs and flags as info metrics. #1788
    + Add network_route collector #1811
    + Add zoneinfo collector #1922
  * Enhancements
    + Add more InfiniBand counters #1694
    + Add flag to aggr ipvs metrics to avoid high cardinality metrics #1709
    + Adding backlog/current queue length to qdisc collector #1732
    + Include TCP OutRsts in netstat metrics #1733
    + Add pool size to entropy collector #1753
    + Remove CGO dependencies for OpenBSD amd64 #1774
    + bcache: add writeback_rate_debug stats #1658
    + Add check state for mdadm arrays via node_md_state metric #1810
    + Expose XFS inode statistics #1870
    + Expose zfs zpool state #1878
    + Added an ability to pass collector.supervisord.url via SUPERVISORD_URL environment variable #1947
  * Bug fixes
    + filesystem_freebsd: Fix label values #1728
    + Fix various procfs parsing errors #1735
    + Handle no data from powersupplyclass #1747
    + udp_queues_linux.go: change upd to udp in two error strings #1769
    + Fix node_scrape_collector_success behaviour #1816
    + Fix NodeRAIDDegraded to not use a string rule expressions #1827
    + Fix node_md_disks state label from fail to failed #1862
    + Handle EPERM for syscall in timex collector #1938
    + bcache: fix typo in a metric name #1943
    + Fix XFS read/write stats (https://github.com/prometheus/procfs/pull/343)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614340800">- Trim old specfile constructs</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Update to 1.1.2
  * Bug fixes
    + Handle errors from disabled PSI subsystem #1983
    + Sanitize strings from /sys/class/power_supply #1984
    + Silence missing netclass errors #1986</changelog>
  <changelog author="pseidensal@suse.com" date="1632398400">- Apply patch to capture permission denied error for "energy_uj" file (bsc#1190535)
  * Adds patch capture-permission-denied-error-energy_uj.patch
    from https://github.com/prometheus/node_exporter/pull/2092</changelog>
  <changelog author="dominik.gedon@suse.com" date="1633089600">- Update to 1.2.2
  * Bug fixes
    Fix processes collector long int parsing #2112
- Update to 1.2.1
  * Removed
    Remove obsolete capture permission denied error patch
    capture-permission-denied-error-energy_uj.patch: Already included upstream
  * Bug fixes
    Fix zoneinfo parsing prometheus/procfs#386
    Fix nvme collector log noise #2091
    Fix rapl collector log noise #2092
- Update to 1.2.0
  * Changes
    Rename filesystem collector flags to match other collectors #2012
    Make node_exporter print usage to STDOUT #203
  * Features
    Add conntrack statistics metrics #1155
    Add ethtool stats collector #1832
    Add flag to ignore network speed if it is unknown #1989
    Add tapestats collector for Linux #2044
    Add nvme collector #2062
  * Enhancements
    Add ErrorLog plumbing to promhttp #1887
    Add more Infiniband counters #2019
    netclass: retrieve interface names and filter before parsing #2033
    Add time zone offset metric #2060
  * Bug fixes
    Handle errors from disabled PSI subsystem #1983
    Fix panic when using backwards compatible flags #2000
    Fix wrong value for OpenBSD memory buffer cache #2015
    Only initiate collectors once #2048
    Handle small backwards jumps in CPU idle #2067</changelog>
  <changelog author="michael@stroeder.com" date="1637236800">- Update to 1.3.0
  * [CHANGE] Add path label to rapl collector #2146
  * [CHANGE] Exclude filesystems under /run/credentials #2157
  * [CHANGE] Add TCPTimeouts to netstat default filter #2189
  * [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771
  * [FEATURE] Add darwin powersupply collector #1777
  * [FEATURE] Add support for monitoring GPUs on Linux #1998
  * [FEATURE] Add Darwin thermal collector #2032
  * [FEATURE] Add os release collector #2094
  * [FEATURE] Add netdev.address-info collector #2105
  * [FEATURE] Add clocksource metrics to time collector #2197
  * [ENHANCEMENT] Support glob textfile collector directories #1985
  * [ENHANCEMENT] ethtool: Expose node_ethtool_info metric #2080
  * [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165
  * [ENHANCEMENT] Add flag to disable guest CPU metrics #2123
  * [ENHANCEMENT] Add DMI collector #2131
  * [ENHANCEMENT] Add threads metrics to processes collector #2164
  * [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169
  * [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189
  * [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208
  * [BUGFIX] ethtool: Sanitize metric names #2093
  * [BUGFIX] Fix ethtool collector for multiple interfaces #2126
  * [BUGFIX] Fix possible panic on macOS #2133
  * [BUGFIX] Collect flag_info and bug_info only for one core #2156
  * [BUGFIX] Prevent duplicate ethtool metric names #2187</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646827200">- Update vendor tarball with prometheus/client_golang 1.11.1
  (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239, jsc#SUMA-114,
  CVE-2022-21698)
  + Added 0001-Update-prometheus-client-to-1.11.1.patch</changelog>
  <changelog author="tdehler@suse.com" date="1649851200">- Update spec file in order to make --version work (bsc#1196652)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1652184000">- Exclude s390 arch.</changelog>
  <changelog author="michael@stroeder.com" date="1656158400">- Update to 1.3.1
  * [BUGFIX] Handle nil CPU thermal power status on M1 #2218
  * [BUGFIX] bsd: Ignore filesystems flagged as MNT_IGNORE. #2227
  * [BUGFIX] Sanitize UTF-8 in dmi collector #2229</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352000">- BuildRequire go1.18 OR HIGHER (previously this was fixed to 1.14)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352001">- update to 1.4.0:
  * [CHANGE] Merge metrics descriptions in textfile collector #2475
  * [FEATURE] [node-mixin] Add darwin dashboard to mixin #2351
  * [FEATURE] Add "isolated" metric on cpu collector on linux #2251
  * [FEATURE] Add cgroup summary collector #2408
  * [FEATURE] Add selinux collector #2205
  * [FEATURE] Add slab info collector #2376
  * [FEATURE] Add sysctl collector #2425
  * [FEATURE] Also track the CPU Spin time for OpenBSD systems #1971
  * [FEATURE] Add support for MacOS version #2471
  * [ENHANCEMENT] [node-mixin] Add missing selectors #2426
  * [ENHANCEMENT] [node-mixin] Change current datasource to grafana's default #2281
  * [ENHANCEMENT] [node-mixin] Change disk graph to disk table #2364
  * [ENHANCEMENT] [node-mixin] Change io time units to %util #2375
  * [ENHANCEMENT] Ad user_wired_bytes and laundry_bytes on *bsd #2266
  * [ENHANCEMENT] Add additional vm_stat memory metrics for darwin #2240
  * [ENHANCEMENT] Add device filter flags to arp collector #2254
  * [ENHANCEMENT] Add diskstats include and exclude device flags #2417
  * [ENHANCEMENT] Add node_softirqs_total metric #2221
  * [ENHANCEMENT] Add rapl zone name label option #2401
  * [ENHANCEMENT] Add slabinfo collector #1799
  * [ENHANCEMENT] Allow user to select port on NTP server to query #2270
  * [ENHANCEMENT] collector/diskstats: Add labels and metrics from udev #2404
  * [ENHANCEMENT] Enable builds against older macOS SDK #2327
  * [ENHANCEMENT] qdisk-linux: Add exclude and include flags for interface name #2432
  * [ENHANCEMENT] systemd: Expose systemd minor version #2282
  * [ENHANCEMENT] Use netlink for tcpstat collector #2322
  * [ENHANCEMENT] Use netlink to get netdev stats #2074
  * [ENHANCEMENT] Add additional perf counters for stalled frontend/backend cycles #2191
  * [ENHANCEMENT] Add btrfs device error stats #2193
  * [BUGFIX] [node-mixin] Fix fsSpaceAvailableCriticalThreshold and fsSpaceAvailableWarning #2352
  * [BUGFIX] Fix concurrency issue in ethtool collector #2289
  * [BUGFIX] Fix concurrency issue in netdev collector #2267
  * [BUGFIX] Fix diskstat reads and write metrics for disks with different sector sizes #2311
  * [BUGFIX] Fix iostat on macos broken by deprecation warning #2292
  * [BUGFIX] Fix NodeFileDescriptorLimit alerts #2340
  * [BUGFIX] Sanitize rapl zone names #2299
  * [BUGFIX] Add file descriptor close safely in test #2447
  * [BUGFIX] Fix race condition in os_release.go #2454
  * [BUGFIX] Skip ZFS IO metrics if their paths are missing #2451</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352002">- update to 1.4.1:
  * [BUGFIX] Fix diskstats exclude flags #2487
  * [BUGFIX] Security: Update go/x/crypto and go/x/net
    (CVE-2022-27191, CVE-2022-27664)
  * [BUGFIX] Security: Update exporter-toolkit
    (CVE-2022-46146, bsc#1208064)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352003">- modify _service file and set all services to disabled
- remove patch 0001-Update-prometheus-client-to-1.11.1.patch
- update to 1.5.0 (jsc#PED-3578):
  * NOTE: This changes the Go runtime "GOMAXPROCS" to 1. This is done to limit the
    concurrency of the exporter to 1 CPU thread at a time in order to avoid a
    race condition problem in the Linux kernel (#2500) and parallel IO issues
    on nodes with high numbers of CPUs/CPU threads (#1880).
  * [CHANGE] Default GOMAXPROCS to 1 #2530
  * [FEATURE] Add multiple listeners and systemd socket listener activation #2393
  * [ENHANCEMENT] Add RTNL version of netclass collector #2492, #2528
  * [BUGFIX] Fix hwmon label sanitizer #2504
  * [BUGFIX] Use native endianness when encoding InetDiagMsg #2508
  * [BUGFIX] Fix btrfs device stats always being zero #2516</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678795200">- Remove node_exporter-1.5.0.tar.gz
- Execute tar and recompress service modules at buildtime</changelog>
  <changelog author="kastl@b1-systems.de" date="1679486400">- change go_modules archive in _service to use obscpio file</changelog>
  <changelog author="kastl@b1-systems.de" date="1685188800">- update to 1.6.0:
  * [CHANGE] Fix cpustat when some cpus are offline #2318
  * [CHANGE] Remove metrics of offline CPUs in CPU collector #2605
  * [CHANGE] Deprecate ntp collector #2603
  * [CHANGE] Remove bcache `cache_readaheads_totals` metrics #2583
  * [CHANGE] Deprecate supervisord collector #2685
  * [FEATURE] Enable uname collector on NetBSD #2559
  * [FEATURE] NetBSD support for the meminfo collector #2570
  * [FEATURE] NetBSD support for CPU collector #2626
  * [FEATURE] Add FreeBSD collector for netisr subsystem #2668
  * [FEATURE] Add softirqs collector #2669
  * [ENHANCEMENT] Add suspended as a `node_zfs_zpool_state` #2449
  * [ENHANCEMENT] Add administrative state of Linux network
    interfaces #2515
  * [ENHANCEMENT] Log current value of GOMAXPROCS #2537
  * [ENHANCEMENT] Add profiler options for perf collector #2542
  * [ENHANCEMENT] Allow root path as metrics path #2590
  * [ENHANCEMENT] Add cpu frequency governor metrics #2569
  * [ENHANCEMENT] Add new landing page #2622
  * [ENHANCEMENT] Reduce privileges needed for btrfs device stats
    [#2634]
  * [ENHANCEMENT] Add ZFS `memory_available_bytes` #2687
  * [ENHANCEMENT] Use `SCSI_IDENT_SERIAL` as serial in diskstats
    [#2612]
  * [ENHANCEMENT] Read missing from netlink netclass attributes
    from sysfs #2669
  * [BUGFIX] perf: fixes for automatically detecting the correct
    tracefs mountpoints #2553
  * [BUGFIX] Fix `thermal_zone` collector noise @2554
  * [BUGFIX] Fix a problem fetching the user wire count on FreeBSD
    2584
  * [BUGFIX] interrupts: Fix fields on linux aarch64 #2631
  * [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605
  * [BUGFIX] Fix OpenBSD filesystem collector string parsing #2637
  * [BUGFIX] Fix bad reporting of `node_cpu_seconds_total` in
    OpenBSD #2663</changelog>
  <changelog author="kastl@b1-systems.de" date="1699876800">- update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):
  * [FEATURE] Add ZFS freebsd per dataset stats #2753
  * [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721
  * [ENHANCEMENT] Parallelize stat calls in Linux filesystem
    collector #1772
  * [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711
  * [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric
    [#2778]
  * [ENHANCEMENT] Improve qdisc collector performance #2779
  * [ENHANCEMENT] Add include and exclude filter for hwmon
    collector #2699
  * [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead
    of procfs #2777
  * [BUFFIX] Fix ZFS arcstats on FreeBSD 14.0+ 2754
  * [BUGFIX] Fallback to 32-bit stats in netdev #2757
  * [BUGFIX] Close btrfs.FS handle after use #2780
  * [BUGFIX] Move RO status before error return #2807
  * [BUFFIX] Fix promhttp_metric_handler_errors_total being always
    active #2808
  * [BUGFIX] Fix nfsd v4 index miss #2824
- update to 1.6.1:
  (no source code changes in this release)
- BuildRequire go1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1707739200">- Add fix_arp_collector.patch
  Patch updates rtnetlink library to fix errors during ARP metrics
  collection.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708689600">- Add add_device_error_label.patch
  Patch adds `device_error` label for filesystem metrics.</changelog>
</package>
<package pkgid="ea951970af6d5de21bdda5e01c6b0110cf401410ca13a178b9e4775b31ad3cdf" name="golang-github-prometheus-node_exporter" arch="ppc64le">
  <version epoch="0" ver="1.7.0" rel="150100.3.29.1"/>
  <changelog author="witold.bedyk@suse.com" date="1614254400">- Migrate to obs_scm
- Migrate to go_modules
- Update to 1.1.1
  * Bug fixes
    + Fix ineffassign issue #1957
    + Fix some noisy log lines #1962
- Update to 1.1.0
  * Changes
    + Improve filter flag names #1743
    + Add btrfs and powersupplyclass to list of exporters enabled by default #1897
  * Features
    + Add fibre channel collector #1786
    + Expose cpu bugs and flags as info metrics. #1788
    + Add network_route collector #1811
    + Add zoneinfo collector #1922
  * Enhancements
    + Add more InfiniBand counters #1694
    + Add flag to aggr ipvs metrics to avoid high cardinality metrics #1709
    + Adding backlog/current queue length to qdisc collector #1732
    + Include TCP OutRsts in netstat metrics #1733
    + Add pool size to entropy collector #1753
    + Remove CGO dependencies for OpenBSD amd64 #1774
    + bcache: add writeback_rate_debug stats #1658
    + Add check state for mdadm arrays via node_md_state metric #1810
    + Expose XFS inode statistics #1870
    + Expose zfs zpool state #1878
    + Added an ability to pass collector.supervisord.url via SUPERVISORD_URL environment variable #1947
  * Bug fixes
    + filesystem_freebsd: Fix label values #1728
    + Fix various procfs parsing errors #1735
    + Handle no data from powersupplyclass #1747
    + udp_queues_linux.go: change upd to udp in two error strings #1769
    + Fix node_scrape_collector_success behaviour #1816
    + Fix NodeRAIDDegraded to not use a string rule expressions #1827
    + Fix node_md_disks state label from fail to failed #1862
    + Handle EPERM for syscall in timex collector #1938
    + bcache: fix typo in a metric name #1943
    + Fix XFS read/write stats (https://github.com/prometheus/procfs/pull/343)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614340800">- Trim old specfile constructs</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Update to 1.1.2
  * Bug fixes
    + Handle errors from disabled PSI subsystem #1983
    + Sanitize strings from /sys/class/power_supply #1984
    + Silence missing netclass errors #1986</changelog>
  <changelog author="pseidensal@suse.com" date="1632398400">- Apply patch to capture permission denied error for "energy_uj" file (bsc#1190535)
  * Adds patch capture-permission-denied-error-energy_uj.patch
    from https://github.com/prometheus/node_exporter/pull/2092</changelog>
  <changelog author="dominik.gedon@suse.com" date="1633089600">- Update to 1.2.2
  * Bug fixes
    Fix processes collector long int parsing #2112
- Update to 1.2.1
  * Removed
    Remove obsolete capture permission denied error patch
    capture-permission-denied-error-energy_uj.patch: Already included upstream
  * Bug fixes
    Fix zoneinfo parsing prometheus/procfs#386
    Fix nvme collector log noise #2091
    Fix rapl collector log noise #2092
- Update to 1.2.0
  * Changes
    Rename filesystem collector flags to match other collectors #2012
    Make node_exporter print usage to STDOUT #203
  * Features
    Add conntrack statistics metrics #1155
    Add ethtool stats collector #1832
    Add flag to ignore network speed if it is unknown #1989
    Add tapestats collector for Linux #2044
    Add nvme collector #2062
  * Enhancements
    Add ErrorLog plumbing to promhttp #1887
    Add more Infiniband counters #2019
    netclass: retrieve interface names and filter before parsing #2033
    Add time zone offset metric #2060
  * Bug fixes
    Handle errors from disabled PSI subsystem #1983
    Fix panic when using backwards compatible flags #2000
    Fix wrong value for OpenBSD memory buffer cache #2015
    Only initiate collectors once #2048
    Handle small backwards jumps in CPU idle #2067</changelog>
  <changelog author="michael@stroeder.com" date="1637236800">- Update to 1.3.0
  * [CHANGE] Add path label to rapl collector #2146
  * [CHANGE] Exclude filesystems under /run/credentials #2157
  * [CHANGE] Add TCPTimeouts to netstat default filter #2189
  * [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771
  * [FEATURE] Add darwin powersupply collector #1777
  * [FEATURE] Add support for monitoring GPUs on Linux #1998
  * [FEATURE] Add Darwin thermal collector #2032
  * [FEATURE] Add os release collector #2094
  * [FEATURE] Add netdev.address-info collector #2105
  * [FEATURE] Add clocksource metrics to time collector #2197
  * [ENHANCEMENT] Support glob textfile collector directories #1985
  * [ENHANCEMENT] ethtool: Expose node_ethtool_info metric #2080
  * [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165
  * [ENHANCEMENT] Add flag to disable guest CPU metrics #2123
  * [ENHANCEMENT] Add DMI collector #2131
  * [ENHANCEMENT] Add threads metrics to processes collector #2164
  * [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169
  * [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189
  * [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208
  * [BUGFIX] ethtool: Sanitize metric names #2093
  * [BUGFIX] Fix ethtool collector for multiple interfaces #2126
  * [BUGFIX] Fix possible panic on macOS #2133
  * [BUGFIX] Collect flag_info and bug_info only for one core #2156
  * [BUGFIX] Prevent duplicate ethtool metric names #2187</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646827200">- Update vendor tarball with prometheus/client_golang 1.11.1
  (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239, jsc#SUMA-114,
  CVE-2022-21698)
  + Added 0001-Update-prometheus-client-to-1.11.1.patch</changelog>
  <changelog author="tdehler@suse.com" date="1649851200">- Update spec file in order to make --version work (bsc#1196652)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1652184000">- Exclude s390 arch.</changelog>
  <changelog author="michael@stroeder.com" date="1656158400">- Update to 1.3.1
  * [BUGFIX] Handle nil CPU thermal power status on M1 #2218
  * [BUGFIX] bsd: Ignore filesystems flagged as MNT_IGNORE. #2227
  * [BUGFIX] Sanitize UTF-8 in dmi collector #2229</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352000">- BuildRequire go1.18 OR HIGHER (previously this was fixed to 1.14)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352001">- update to 1.4.0:
  * [CHANGE] Merge metrics descriptions in textfile collector #2475
  * [FEATURE] [node-mixin] Add darwin dashboard to mixin #2351
  * [FEATURE] Add "isolated" metric on cpu collector on linux #2251
  * [FEATURE] Add cgroup summary collector #2408
  * [FEATURE] Add selinux collector #2205
  * [FEATURE] Add slab info collector #2376
  * [FEATURE] Add sysctl collector #2425
  * [FEATURE] Also track the CPU Spin time for OpenBSD systems #1971
  * [FEATURE] Add support for MacOS version #2471
  * [ENHANCEMENT] [node-mixin] Add missing selectors #2426
  * [ENHANCEMENT] [node-mixin] Change current datasource to grafana's default #2281
  * [ENHANCEMENT] [node-mixin] Change disk graph to disk table #2364
  * [ENHANCEMENT] [node-mixin] Change io time units to %util #2375
  * [ENHANCEMENT] Ad user_wired_bytes and laundry_bytes on *bsd #2266
  * [ENHANCEMENT] Add additional vm_stat memory metrics for darwin #2240
  * [ENHANCEMENT] Add device filter flags to arp collector #2254
  * [ENHANCEMENT] Add diskstats include and exclude device flags #2417
  * [ENHANCEMENT] Add node_softirqs_total metric #2221
  * [ENHANCEMENT] Add rapl zone name label option #2401
  * [ENHANCEMENT] Add slabinfo collector #1799
  * [ENHANCEMENT] Allow user to select port on NTP server to query #2270
  * [ENHANCEMENT] collector/diskstats: Add labels and metrics from udev #2404
  * [ENHANCEMENT] Enable builds against older macOS SDK #2327
  * [ENHANCEMENT] qdisk-linux: Add exclude and include flags for interface name #2432
  * [ENHANCEMENT] systemd: Expose systemd minor version #2282
  * [ENHANCEMENT] Use netlink for tcpstat collector #2322
  * [ENHANCEMENT] Use netlink to get netdev stats #2074
  * [ENHANCEMENT] Add additional perf counters for stalled frontend/backend cycles #2191
  * [ENHANCEMENT] Add btrfs device error stats #2193
  * [BUGFIX] [node-mixin] Fix fsSpaceAvailableCriticalThreshold and fsSpaceAvailableWarning #2352
  * [BUGFIX] Fix concurrency issue in ethtool collector #2289
  * [BUGFIX] Fix concurrency issue in netdev collector #2267
  * [BUGFIX] Fix diskstat reads and write metrics for disks with different sector sizes #2311
  * [BUGFIX] Fix iostat on macos broken by deprecation warning #2292
  * [BUGFIX] Fix NodeFileDescriptorLimit alerts #2340
  * [BUGFIX] Sanitize rapl zone names #2299
  * [BUGFIX] Add file descriptor close safely in test #2447
  * [BUGFIX] Fix race condition in os_release.go #2454
  * [BUGFIX] Skip ZFS IO metrics if their paths are missing #2451</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352002">- update to 1.4.1:
  * [BUGFIX] Fix diskstats exclude flags #2487
  * [BUGFIX] Security: Update go/x/crypto and go/x/net
    (CVE-2022-27191, CVE-2022-27664)
  * [BUGFIX] Security: Update exporter-toolkit
    (CVE-2022-46146, bsc#1208064)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352003">- modify _service file and set all services to disabled
- remove patch 0001-Update-prometheus-client-to-1.11.1.patch
- update to 1.5.0 (jsc#PED-3578):
  * NOTE: This changes the Go runtime "GOMAXPROCS" to 1. This is done to limit the
    concurrency of the exporter to 1 CPU thread at a time in order to avoid a
    race condition problem in the Linux kernel (#2500) and parallel IO issues
    on nodes with high numbers of CPUs/CPU threads (#1880).
  * [CHANGE] Default GOMAXPROCS to 1 #2530
  * [FEATURE] Add multiple listeners and systemd socket listener activation #2393
  * [ENHANCEMENT] Add RTNL version of netclass collector #2492, #2528
  * [BUGFIX] Fix hwmon label sanitizer #2504
  * [BUGFIX] Use native endianness when encoding InetDiagMsg #2508
  * [BUGFIX] Fix btrfs device stats always being zero #2516</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678795200">- Remove node_exporter-1.5.0.tar.gz
- Execute tar and recompress service modules at buildtime</changelog>
  <changelog author="kastl@b1-systems.de" date="1679486400">- change go_modules archive in _service to use obscpio file</changelog>
  <changelog author="kastl@b1-systems.de" date="1685188800">- update to 1.6.0:
  * [CHANGE] Fix cpustat when some cpus are offline #2318
  * [CHANGE] Remove metrics of offline CPUs in CPU collector #2605
  * [CHANGE] Deprecate ntp collector #2603
  * [CHANGE] Remove bcache `cache_readaheads_totals` metrics #2583
  * [CHANGE] Deprecate supervisord collector #2685
  * [FEATURE] Enable uname collector on NetBSD #2559
  * [FEATURE] NetBSD support for the meminfo collector #2570
  * [FEATURE] NetBSD support for CPU collector #2626
  * [FEATURE] Add FreeBSD collector for netisr subsystem #2668
  * [FEATURE] Add softirqs collector #2669
  * [ENHANCEMENT] Add suspended as a `node_zfs_zpool_state` #2449
  * [ENHANCEMENT] Add administrative state of Linux network
    interfaces #2515
  * [ENHANCEMENT] Log current value of GOMAXPROCS #2537
  * [ENHANCEMENT] Add profiler options for perf collector #2542
  * [ENHANCEMENT] Allow root path as metrics path #2590
  * [ENHANCEMENT] Add cpu frequency governor metrics #2569
  * [ENHANCEMENT] Add new landing page #2622
  * [ENHANCEMENT] Reduce privileges needed for btrfs device stats
    [#2634]
  * [ENHANCEMENT] Add ZFS `memory_available_bytes` #2687
  * [ENHANCEMENT] Use `SCSI_IDENT_SERIAL` as serial in diskstats
    [#2612]
  * [ENHANCEMENT] Read missing from netlink netclass attributes
    from sysfs #2669
  * [BUGFIX] perf: fixes for automatically detecting the correct
    tracefs mountpoints #2553
  * [BUGFIX] Fix `thermal_zone` collector noise @2554
  * [BUGFIX] Fix a problem fetching the user wire count on FreeBSD
    2584
  * [BUGFIX] interrupts: Fix fields on linux aarch64 #2631
  * [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605
  * [BUGFIX] Fix OpenBSD filesystem collector string parsing #2637
  * [BUGFIX] Fix bad reporting of `node_cpu_seconds_total` in
    OpenBSD #2663</changelog>
  <changelog author="kastl@b1-systems.de" date="1699876800">- update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):
  * [FEATURE] Add ZFS freebsd per dataset stats #2753
  * [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721
  * [ENHANCEMENT] Parallelize stat calls in Linux filesystem
    collector #1772
  * [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711
  * [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric
    [#2778]
  * [ENHANCEMENT] Improve qdisc collector performance #2779
  * [ENHANCEMENT] Add include and exclude filter for hwmon
    collector #2699
  * [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead
    of procfs #2777
  * [BUFFIX] Fix ZFS arcstats on FreeBSD 14.0+ 2754
  * [BUGFIX] Fallback to 32-bit stats in netdev #2757
  * [BUGFIX] Close btrfs.FS handle after use #2780
  * [BUGFIX] Move RO status before error return #2807
  * [BUFFIX] Fix promhttp_metric_handler_errors_total being always
    active #2808
  * [BUGFIX] Fix nfsd v4 index miss #2824
- update to 1.6.1:
  (no source code changes in this release)
- BuildRequire go1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1707739200">- Add fix_arp_collector.patch
  Patch updates rtnetlink library to fix errors during ARP metrics
  collection.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708689600">- Add add_device_error_label.patch
  Patch adds `device_error` label for filesystem metrics.</changelog>
</package>
<package pkgid="64d7e6533cc83c857753db875fdbced2a9f8cb7b032474ff223c3b774ab04d2a" name="golang-github-prometheus-node_exporter" arch="s390x">
  <version epoch="0" ver="1.7.0" rel="150100.3.29.1"/>
  <changelog author="witold.bedyk@suse.com" date="1614254400">- Migrate to obs_scm
- Migrate to go_modules
- Update to 1.1.1
  * Bug fixes
    + Fix ineffassign issue #1957
    + Fix some noisy log lines #1962
- Update to 1.1.0
  * Changes
    + Improve filter flag names #1743
    + Add btrfs and powersupplyclass to list of exporters enabled by default #1897
  * Features
    + Add fibre channel collector #1786
    + Expose cpu bugs and flags as info metrics. #1788
    + Add network_route collector #1811
    + Add zoneinfo collector #1922
  * Enhancements
    + Add more InfiniBand counters #1694
    + Add flag to aggr ipvs metrics to avoid high cardinality metrics #1709
    + Adding backlog/current queue length to qdisc collector #1732
    + Include TCP OutRsts in netstat metrics #1733
    + Add pool size to entropy collector #1753
    + Remove CGO dependencies for OpenBSD amd64 #1774
    + bcache: add writeback_rate_debug stats #1658
    + Add check state for mdadm arrays via node_md_state metric #1810
    + Expose XFS inode statistics #1870
    + Expose zfs zpool state #1878
    + Added an ability to pass collector.supervisord.url via SUPERVISORD_URL environment variable #1947
  * Bug fixes
    + filesystem_freebsd: Fix label values #1728
    + Fix various procfs parsing errors #1735
    + Handle no data from powersupplyclass #1747
    + udp_queues_linux.go: change upd to udp in two error strings #1769
    + Fix node_scrape_collector_success behaviour #1816
    + Fix NodeRAIDDegraded to not use a string rule expressions #1827
    + Fix node_md_disks state label from fail to failed #1862
    + Handle EPERM for syscall in timex collector #1938
    + bcache: fix typo in a metric name #1943
    + Fix XFS read/write stats (https://github.com/prometheus/procfs/pull/343)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614340800">- Trim old specfile constructs</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Update to 1.1.2
  * Bug fixes
    + Handle errors from disabled PSI subsystem #1983
    + Sanitize strings from /sys/class/power_supply #1984
    + Silence missing netclass errors #1986</changelog>
  <changelog author="pseidensal@suse.com" date="1632398400">- Apply patch to capture permission denied error for "energy_uj" file (bsc#1190535)
  * Adds patch capture-permission-denied-error-energy_uj.patch
    from https://github.com/prometheus/node_exporter/pull/2092</changelog>
  <changelog author="dominik.gedon@suse.com" date="1633089600">- Update to 1.2.2
  * Bug fixes
    Fix processes collector long int parsing #2112
- Update to 1.2.1
  * Removed
    Remove obsolete capture permission denied error patch
    capture-permission-denied-error-energy_uj.patch: Already included upstream
  * Bug fixes
    Fix zoneinfo parsing prometheus/procfs#386
    Fix nvme collector log noise #2091
    Fix rapl collector log noise #2092
- Update to 1.2.0
  * Changes
    Rename filesystem collector flags to match other collectors #2012
    Make node_exporter print usage to STDOUT #203
  * Features
    Add conntrack statistics metrics #1155
    Add ethtool stats collector #1832
    Add flag to ignore network speed if it is unknown #1989
    Add tapestats collector for Linux #2044
    Add nvme collector #2062
  * Enhancements
    Add ErrorLog plumbing to promhttp #1887
    Add more Infiniband counters #2019
    netclass: retrieve interface names and filter before parsing #2033
    Add time zone offset metric #2060
  * Bug fixes
    Handle errors from disabled PSI subsystem #1983
    Fix panic when using backwards compatible flags #2000
    Fix wrong value for OpenBSD memory buffer cache #2015
    Only initiate collectors once #2048
    Handle small backwards jumps in CPU idle #2067</changelog>
  <changelog author="michael@stroeder.com" date="1637236800">- Update to 1.3.0
  * [CHANGE] Add path label to rapl collector #2146
  * [CHANGE] Exclude filesystems under /run/credentials #2157
  * [CHANGE] Add TCPTimeouts to netstat default filter #2189
  * [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771
  * [FEATURE] Add darwin powersupply collector #1777
  * [FEATURE] Add support for monitoring GPUs on Linux #1998
  * [FEATURE] Add Darwin thermal collector #2032
  * [FEATURE] Add os release collector #2094
  * [FEATURE] Add netdev.address-info collector #2105
  * [FEATURE] Add clocksource metrics to time collector #2197
  * [ENHANCEMENT] Support glob textfile collector directories #1985
  * [ENHANCEMENT] ethtool: Expose node_ethtool_info metric #2080
  * [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165
  * [ENHANCEMENT] Add flag to disable guest CPU metrics #2123
  * [ENHANCEMENT] Add DMI collector #2131
  * [ENHANCEMENT] Add threads metrics to processes collector #2164
  * [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169
  * [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189
  * [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208
  * [BUGFIX] ethtool: Sanitize metric names #2093
  * [BUGFIX] Fix ethtool collector for multiple interfaces #2126
  * [BUGFIX] Fix possible panic on macOS #2133
  * [BUGFIX] Collect flag_info and bug_info only for one core #2156
  * [BUGFIX] Prevent duplicate ethtool metric names #2187</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646827200">- Update vendor tarball with prometheus/client_golang 1.11.1
  (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239, jsc#SUMA-114,
  CVE-2022-21698)
  + Added 0001-Update-prometheus-client-to-1.11.1.patch</changelog>
  <changelog author="tdehler@suse.com" date="1649851200">- Update spec file in order to make --version work (bsc#1196652)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1652184000">- Exclude s390 arch.</changelog>
  <changelog author="michael@stroeder.com" date="1656158400">- Update to 1.3.1
  * [BUGFIX] Handle nil CPU thermal power status on M1 #2218
  * [BUGFIX] bsd: Ignore filesystems flagged as MNT_IGNORE. #2227
  * [BUGFIX] Sanitize UTF-8 in dmi collector #2229</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352000">- BuildRequire go1.18 OR HIGHER (previously this was fixed to 1.14)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352001">- update to 1.4.0:
  * [CHANGE] Merge metrics descriptions in textfile collector #2475
  * [FEATURE] [node-mixin] Add darwin dashboard to mixin #2351
  * [FEATURE] Add "isolated" metric on cpu collector on linux #2251
  * [FEATURE] Add cgroup summary collector #2408
  * [FEATURE] Add selinux collector #2205
  * [FEATURE] Add slab info collector #2376
  * [FEATURE] Add sysctl collector #2425
  * [FEATURE] Also track the CPU Spin time for OpenBSD systems #1971
  * [FEATURE] Add support for MacOS version #2471
  * [ENHANCEMENT] [node-mixin] Add missing selectors #2426
  * [ENHANCEMENT] [node-mixin] Change current datasource to grafana's default #2281
  * [ENHANCEMENT] [node-mixin] Change disk graph to disk table #2364
  * [ENHANCEMENT] [node-mixin] Change io time units to %util #2375
  * [ENHANCEMENT] Ad user_wired_bytes and laundry_bytes on *bsd #2266
  * [ENHANCEMENT] Add additional vm_stat memory metrics for darwin #2240
  * [ENHANCEMENT] Add device filter flags to arp collector #2254
  * [ENHANCEMENT] Add diskstats include and exclude device flags #2417
  * [ENHANCEMENT] Add node_softirqs_total metric #2221
  * [ENHANCEMENT] Add rapl zone name label option #2401
  * [ENHANCEMENT] Add slabinfo collector #1799
  * [ENHANCEMENT] Allow user to select port on NTP server to query #2270
  * [ENHANCEMENT] collector/diskstats: Add labels and metrics from udev #2404
  * [ENHANCEMENT] Enable builds against older macOS SDK #2327
  * [ENHANCEMENT] qdisk-linux: Add exclude and include flags for interface name #2432
  * [ENHANCEMENT] systemd: Expose systemd minor version #2282
  * [ENHANCEMENT] Use netlink for tcpstat collector #2322
  * [ENHANCEMENT] Use netlink to get netdev stats #2074
  * [ENHANCEMENT] Add additional perf counters for stalled frontend/backend cycles #2191
  * [ENHANCEMENT] Add btrfs device error stats #2193
  * [BUGFIX] [node-mixin] Fix fsSpaceAvailableCriticalThreshold and fsSpaceAvailableWarning #2352
  * [BUGFIX] Fix concurrency issue in ethtool collector #2289
  * [BUGFIX] Fix concurrency issue in netdev collector #2267
  * [BUGFIX] Fix diskstat reads and write metrics for disks with different sector sizes #2311
  * [BUGFIX] Fix iostat on macos broken by deprecation warning #2292
  * [BUGFIX] Fix NodeFileDescriptorLimit alerts #2340
  * [BUGFIX] Sanitize rapl zone names #2299
  * [BUGFIX] Add file descriptor close safely in test #2447
  * [BUGFIX] Fix race condition in os_release.go #2454
  * [BUGFIX] Skip ZFS IO metrics if their paths are missing #2451</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352002">- update to 1.4.1:
  * [BUGFIX] Fix diskstats exclude flags #2487
  * [BUGFIX] Security: Update go/x/crypto and go/x/net
    (CVE-2022-27191, CVE-2022-27664)
  * [BUGFIX] Security: Update exporter-toolkit
    (CVE-2022-46146, bsc#1208064)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352003">- modify _service file and set all services to disabled
- remove patch 0001-Update-prometheus-client-to-1.11.1.patch
- update to 1.5.0 (jsc#PED-3578):
  * NOTE: This changes the Go runtime "GOMAXPROCS" to 1. This is done to limit the
    concurrency of the exporter to 1 CPU thread at a time in order to avoid a
    race condition problem in the Linux kernel (#2500) and parallel IO issues
    on nodes with high numbers of CPUs/CPU threads (#1880).
  * [CHANGE] Default GOMAXPROCS to 1 #2530
  * [FEATURE] Add multiple listeners and systemd socket listener activation #2393
  * [ENHANCEMENT] Add RTNL version of netclass collector #2492, #2528
  * [BUGFIX] Fix hwmon label sanitizer #2504
  * [BUGFIX] Use native endianness when encoding InetDiagMsg #2508
  * [BUGFIX] Fix btrfs device stats always being zero #2516</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678795200">- Remove node_exporter-1.5.0.tar.gz
- Execute tar and recompress service modules at buildtime</changelog>
  <changelog author="kastl@b1-systems.de" date="1679486400">- change go_modules archive in _service to use obscpio file</changelog>
  <changelog author="kastl@b1-systems.de" date="1685188800">- update to 1.6.0:
  * [CHANGE] Fix cpustat when some cpus are offline #2318
  * [CHANGE] Remove metrics of offline CPUs in CPU collector #2605
  * [CHANGE] Deprecate ntp collector #2603
  * [CHANGE] Remove bcache `cache_readaheads_totals` metrics #2583
  * [CHANGE] Deprecate supervisord collector #2685
  * [FEATURE] Enable uname collector on NetBSD #2559
  * [FEATURE] NetBSD support for the meminfo collector #2570
  * [FEATURE] NetBSD support for CPU collector #2626
  * [FEATURE] Add FreeBSD collector for netisr subsystem #2668
  * [FEATURE] Add softirqs collector #2669
  * [ENHANCEMENT] Add suspended as a `node_zfs_zpool_state` #2449
  * [ENHANCEMENT] Add administrative state of Linux network
    interfaces #2515
  * [ENHANCEMENT] Log current value of GOMAXPROCS #2537
  * [ENHANCEMENT] Add profiler options for perf collector #2542
  * [ENHANCEMENT] Allow root path as metrics path #2590
  * [ENHANCEMENT] Add cpu frequency governor metrics #2569
  * [ENHANCEMENT] Add new landing page #2622
  * [ENHANCEMENT] Reduce privileges needed for btrfs device stats
    [#2634]
  * [ENHANCEMENT] Add ZFS `memory_available_bytes` #2687
  * [ENHANCEMENT] Use `SCSI_IDENT_SERIAL` as serial in diskstats
    [#2612]
  * [ENHANCEMENT] Read missing from netlink netclass attributes
    from sysfs #2669
  * [BUGFIX] perf: fixes for automatically detecting the correct
    tracefs mountpoints #2553
  * [BUGFIX] Fix `thermal_zone` collector noise @2554
  * [BUGFIX] Fix a problem fetching the user wire count on FreeBSD
    2584
  * [BUGFIX] interrupts: Fix fields on linux aarch64 #2631
  * [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605
  * [BUGFIX] Fix OpenBSD filesystem collector string parsing #2637
  * [BUGFIX] Fix bad reporting of `node_cpu_seconds_total` in
    OpenBSD #2663</changelog>
  <changelog author="kastl@b1-systems.de" date="1699876800">- update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):
  * [FEATURE] Add ZFS freebsd per dataset stats #2753
  * [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721
  * [ENHANCEMENT] Parallelize stat calls in Linux filesystem
    collector #1772
  * [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711
  * [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric
    [#2778]
  * [ENHANCEMENT] Improve qdisc collector performance #2779
  * [ENHANCEMENT] Add include and exclude filter for hwmon
    collector #2699
  * [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead
    of procfs #2777
  * [BUFFIX] Fix ZFS arcstats on FreeBSD 14.0+ 2754
  * [BUGFIX] Fallback to 32-bit stats in netdev #2757
  * [BUGFIX] Close btrfs.FS handle after use #2780
  * [BUGFIX] Move RO status before error return #2807
  * [BUFFIX] Fix promhttp_metric_handler_errors_total being always
    active #2808
  * [BUGFIX] Fix nfsd v4 index miss #2824
- update to 1.6.1:
  (no source code changes in this release)
- BuildRequire go1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1707739200">- Add fix_arp_collector.patch
  Patch updates rtnetlink library to fix errors during ARP metrics
  collection.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708689600">- Add add_device_error_label.patch
  Patch adds `device_error` label for filesystem metrics.</changelog>
</package>
<package pkgid="94264e643641fe428c662b9793e2f9dd0d270fc4591c8e3d06bdace25108d800" name="golang-github-prometheus-node_exporter" arch="src">
  <version epoch="0" ver="1.7.0" rel="150100.3.29.1"/>
  <changelog author="witold.bedyk@suse.com" date="1614254400">- Migrate to obs_scm
- Migrate to go_modules
- Update to 1.1.1
  * Bug fixes
    + Fix ineffassign issue #1957
    + Fix some noisy log lines #1962
- Update to 1.1.0
  * Changes
    + Improve filter flag names #1743
    + Add btrfs and powersupplyclass to list of exporters enabled by default #1897
  * Features
    + Add fibre channel collector #1786
    + Expose cpu bugs and flags as info metrics. #1788
    + Add network_route collector #1811
    + Add zoneinfo collector #1922
  * Enhancements
    + Add more InfiniBand counters #1694
    + Add flag to aggr ipvs metrics to avoid high cardinality metrics #1709
    + Adding backlog/current queue length to qdisc collector #1732
    + Include TCP OutRsts in netstat metrics #1733
    + Add pool size to entropy collector #1753
    + Remove CGO dependencies for OpenBSD amd64 #1774
    + bcache: add writeback_rate_debug stats #1658
    + Add check state for mdadm arrays via node_md_state metric #1810
    + Expose XFS inode statistics #1870
    + Expose zfs zpool state #1878
    + Added an ability to pass collector.supervisord.url via SUPERVISORD_URL environment variable #1947
  * Bug fixes
    + filesystem_freebsd: Fix label values #1728
    + Fix various procfs parsing errors #1735
    + Handle no data from powersupplyclass #1747
    + udp_queues_linux.go: change upd to udp in two error strings #1769
    + Fix node_scrape_collector_success behaviour #1816
    + Fix NodeRAIDDegraded to not use a string rule expressions #1827
    + Fix node_md_disks state label from fail to failed #1862
    + Handle EPERM for syscall in timex collector #1938
    + bcache: fix typo in a metric name #1943
    + Fix XFS read/write stats (https://github.com/prometheus/procfs/pull/343)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614340800">- Trim old specfile constructs</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Update to 1.1.2
  * Bug fixes
    + Handle errors from disabled PSI subsystem #1983
    + Sanitize strings from /sys/class/power_supply #1984
    + Silence missing netclass errors #1986</changelog>
  <changelog author="pseidensal@suse.com" date="1632398400">- Apply patch to capture permission denied error for "energy_uj" file (bsc#1190535)
  * Adds patch capture-permission-denied-error-energy_uj.patch
    from https://github.com/prometheus/node_exporter/pull/2092</changelog>
  <changelog author="dominik.gedon@suse.com" date="1633089600">- Update to 1.2.2
  * Bug fixes
    Fix processes collector long int parsing #2112
- Update to 1.2.1
  * Removed
    Remove obsolete capture permission denied error patch
    capture-permission-denied-error-energy_uj.patch: Already included upstream
  * Bug fixes
    Fix zoneinfo parsing prometheus/procfs#386
    Fix nvme collector log noise #2091
    Fix rapl collector log noise #2092
- Update to 1.2.0
  * Changes
    Rename filesystem collector flags to match other collectors #2012
    Make node_exporter print usage to STDOUT #203
  * Features
    Add conntrack statistics metrics #1155
    Add ethtool stats collector #1832
    Add flag to ignore network speed if it is unknown #1989
    Add tapestats collector for Linux #2044
    Add nvme collector #2062
  * Enhancements
    Add ErrorLog plumbing to promhttp #1887
    Add more Infiniband counters #2019
    netclass: retrieve interface names and filter before parsing #2033
    Add time zone offset metric #2060
  * Bug fixes
    Handle errors from disabled PSI subsystem #1983
    Fix panic when using backwards compatible flags #2000
    Fix wrong value for OpenBSD memory buffer cache #2015
    Only initiate collectors once #2048
    Handle small backwards jumps in CPU idle #2067</changelog>
  <changelog author="michael@stroeder.com" date="1637236800">- Update to 1.3.0
  * [CHANGE] Add path label to rapl collector #2146
  * [CHANGE] Exclude filesystems under /run/credentials #2157
  * [CHANGE] Add TCPTimeouts to netstat default filter #2189
  * [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771
  * [FEATURE] Add darwin powersupply collector #1777
  * [FEATURE] Add support for monitoring GPUs on Linux #1998
  * [FEATURE] Add Darwin thermal collector #2032
  * [FEATURE] Add os release collector #2094
  * [FEATURE] Add netdev.address-info collector #2105
  * [FEATURE] Add clocksource metrics to time collector #2197
  * [ENHANCEMENT] Support glob textfile collector directories #1985
  * [ENHANCEMENT] ethtool: Expose node_ethtool_info metric #2080
  * [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165
  * [ENHANCEMENT] Add flag to disable guest CPU metrics #2123
  * [ENHANCEMENT] Add DMI collector #2131
  * [ENHANCEMENT] Add threads metrics to processes collector #2164
  * [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169
  * [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189
  * [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208
  * [BUGFIX] ethtool: Sanitize metric names #2093
  * [BUGFIX] Fix ethtool collector for multiple interfaces #2126
  * [BUGFIX] Fix possible panic on macOS #2133
  * [BUGFIX] Collect flag_info and bug_info only for one core #2156
  * [BUGFIX] Prevent duplicate ethtool metric names #2187</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646827200">- Update vendor tarball with prometheus/client_golang 1.11.1
  (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239, jsc#SUMA-114,
  CVE-2022-21698)
  + Added 0001-Update-prometheus-client-to-1.11.1.patch</changelog>
  <changelog author="tdehler@suse.com" date="1649851200">- Update spec file in order to make --version work (bsc#1196652)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1652184000">- Exclude s390 arch.</changelog>
  <changelog author="michael@stroeder.com" date="1656158400">- Update to 1.3.1
  * [BUGFIX] Handle nil CPU thermal power status on M1 #2218
  * [BUGFIX] bsd: Ignore filesystems flagged as MNT_IGNORE. #2227
  * [BUGFIX] Sanitize UTF-8 in dmi collector #2229</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352000">- BuildRequire go1.18 OR HIGHER (previously this was fixed to 1.14)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352001">- update to 1.4.0:
  * [CHANGE] Merge metrics descriptions in textfile collector #2475
  * [FEATURE] [node-mixin] Add darwin dashboard to mixin #2351
  * [FEATURE] Add "isolated" metric on cpu collector on linux #2251
  * [FEATURE] Add cgroup summary collector #2408
  * [FEATURE] Add selinux collector #2205
  * [FEATURE] Add slab info collector #2376
  * [FEATURE] Add sysctl collector #2425
  * [FEATURE] Also track the CPU Spin time for OpenBSD systems #1971
  * [FEATURE] Add support for MacOS version #2471
  * [ENHANCEMENT] [node-mixin] Add missing selectors #2426
  * [ENHANCEMENT] [node-mixin] Change current datasource to grafana's default #2281
  * [ENHANCEMENT] [node-mixin] Change disk graph to disk table #2364
  * [ENHANCEMENT] [node-mixin] Change io time units to %util #2375
  * [ENHANCEMENT] Ad user_wired_bytes and laundry_bytes on *bsd #2266
  * [ENHANCEMENT] Add additional vm_stat memory metrics for darwin #2240
  * [ENHANCEMENT] Add device filter flags to arp collector #2254
  * [ENHANCEMENT] Add diskstats include and exclude device flags #2417
  * [ENHANCEMENT] Add node_softirqs_total metric #2221
  * [ENHANCEMENT] Add rapl zone name label option #2401
  * [ENHANCEMENT] Add slabinfo collector #1799
  * [ENHANCEMENT] Allow user to select port on NTP server to query #2270
  * [ENHANCEMENT] collector/diskstats: Add labels and metrics from udev #2404
  * [ENHANCEMENT] Enable builds against older macOS SDK #2327
  * [ENHANCEMENT] qdisk-linux: Add exclude and include flags for interface name #2432
  * [ENHANCEMENT] systemd: Expose systemd minor version #2282
  * [ENHANCEMENT] Use netlink for tcpstat collector #2322
  * [ENHANCEMENT] Use netlink to get netdev stats #2074
  * [ENHANCEMENT] Add additional perf counters for stalled frontend/backend cycles #2191
  * [ENHANCEMENT] Add btrfs device error stats #2193
  * [BUGFIX] [node-mixin] Fix fsSpaceAvailableCriticalThreshold and fsSpaceAvailableWarning #2352
  * [BUGFIX] Fix concurrency issue in ethtool collector #2289
  * [BUGFIX] Fix concurrency issue in netdev collector #2267
  * [BUGFIX] Fix diskstat reads and write metrics for disks with different sector sizes #2311
  * [BUGFIX] Fix iostat on macos broken by deprecation warning #2292
  * [BUGFIX] Fix NodeFileDescriptorLimit alerts #2340
  * [BUGFIX] Sanitize rapl zone names #2299
  * [BUGFIX] Add file descriptor close safely in test #2447
  * [BUGFIX] Fix race condition in os_release.go #2454
  * [BUGFIX] Skip ZFS IO metrics if their paths are missing #2451</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352002">- update to 1.4.1:
  * [BUGFIX] Fix diskstats exclude flags #2487
  * [BUGFIX] Security: Update go/x/crypto and go/x/net
    (CVE-2022-27191, CVE-2022-27664)
  * [BUGFIX] Security: Update exporter-toolkit
    (CVE-2022-46146, bsc#1208064)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352003">- modify _service file and set all services to disabled
- remove patch 0001-Update-prometheus-client-to-1.11.1.patch
- update to 1.5.0 (jsc#PED-3578):
  * NOTE: This changes the Go runtime "GOMAXPROCS" to 1. This is done to limit the
    concurrency of the exporter to 1 CPU thread at a time in order to avoid a
    race condition problem in the Linux kernel (#2500) and parallel IO issues
    on nodes with high numbers of CPUs/CPU threads (#1880).
  * [CHANGE] Default GOMAXPROCS to 1 #2530
  * [FEATURE] Add multiple listeners and systemd socket listener activation #2393
  * [ENHANCEMENT] Add RTNL version of netclass collector #2492, #2528
  * [BUGFIX] Fix hwmon label sanitizer #2504
  * [BUGFIX] Use native endianness when encoding InetDiagMsg #2508
  * [BUGFIX] Fix btrfs device stats always being zero #2516</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678795200">- Remove node_exporter-1.5.0.tar.gz
- Execute tar and recompress service modules at buildtime</changelog>
  <changelog author="kastl@b1-systems.de" date="1679486400">- change go_modules archive in _service to use obscpio file</changelog>
  <changelog author="kastl@b1-systems.de" date="1685188800">- update to 1.6.0:
  * [CHANGE] Fix cpustat when some cpus are offline #2318
  * [CHANGE] Remove metrics of offline CPUs in CPU collector #2605
  * [CHANGE] Deprecate ntp collector #2603
  * [CHANGE] Remove bcache `cache_readaheads_totals` metrics #2583
  * [CHANGE] Deprecate supervisord collector #2685
  * [FEATURE] Enable uname collector on NetBSD #2559
  * [FEATURE] NetBSD support for the meminfo collector #2570
  * [FEATURE] NetBSD support for CPU collector #2626
  * [FEATURE] Add FreeBSD collector for netisr subsystem #2668
  * [FEATURE] Add softirqs collector #2669
  * [ENHANCEMENT] Add suspended as a `node_zfs_zpool_state` #2449
  * [ENHANCEMENT] Add administrative state of Linux network
    interfaces #2515
  * [ENHANCEMENT] Log current value of GOMAXPROCS #2537
  * [ENHANCEMENT] Add profiler options for perf collector #2542
  * [ENHANCEMENT] Allow root path as metrics path #2590
  * [ENHANCEMENT] Add cpu frequency governor metrics #2569
  * [ENHANCEMENT] Add new landing page #2622
  * [ENHANCEMENT] Reduce privileges needed for btrfs device stats
    [#2634]
  * [ENHANCEMENT] Add ZFS `memory_available_bytes` #2687
  * [ENHANCEMENT] Use `SCSI_IDENT_SERIAL` as serial in diskstats
    [#2612]
  * [ENHANCEMENT] Read missing from netlink netclass attributes
    from sysfs #2669
  * [BUGFIX] perf: fixes for automatically detecting the correct
    tracefs mountpoints #2553
  * [BUGFIX] Fix `thermal_zone` collector noise @2554
  * [BUGFIX] Fix a problem fetching the user wire count on FreeBSD
    2584
  * [BUGFIX] interrupts: Fix fields on linux aarch64 #2631
  * [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605
  * [BUGFIX] Fix OpenBSD filesystem collector string parsing #2637
  * [BUGFIX] Fix bad reporting of `node_cpu_seconds_total` in
    OpenBSD #2663</changelog>
  <changelog author="kastl@b1-systems.de" date="1699876800">- update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):
  * [FEATURE] Add ZFS freebsd per dataset stats #2753
  * [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721
  * [ENHANCEMENT] Parallelize stat calls in Linux filesystem
    collector #1772
  * [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711
  * [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric
    [#2778]
  * [ENHANCEMENT] Improve qdisc collector performance #2779
  * [ENHANCEMENT] Add include and exclude filter for hwmon
    collector #2699
  * [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead
    of procfs #2777
  * [BUFFIX] Fix ZFS arcstats on FreeBSD 14.0+ 2754
  * [BUGFIX] Fallback to 32-bit stats in netdev #2757
  * [BUGFIX] Close btrfs.FS handle after use #2780
  * [BUGFIX] Move RO status before error return #2807
  * [BUFFIX] Fix promhttp_metric_handler_errors_total being always
    active #2808
  * [BUGFIX] Fix nfsd v4 index miss #2824
- update to 1.6.1:
  (no source code changes in this release)
- BuildRequire go1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1707739200">- Add fix_arp_collector.patch
  Patch updates rtnetlink library to fix errors during ARP metrics
  collection.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708689600">- Add add_device_error_label.patch
  Patch adds `device_error` label for filesystem metrics.</changelog>
</package>
<package pkgid="3009da1b70bab047689d41dc90344300990bcf89d0e5cc8bd90591312a027a43" name="golang-github-prometheus-node_exporter" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="150100.3.29.1"/>
  <changelog author="witold.bedyk@suse.com" date="1614254400">- Migrate to obs_scm
- Migrate to go_modules
- Update to 1.1.1
  * Bug fixes
    + Fix ineffassign issue #1957
    + Fix some noisy log lines #1962
- Update to 1.1.0
  * Changes
    + Improve filter flag names #1743
    + Add btrfs and powersupplyclass to list of exporters enabled by default #1897
  * Features
    + Add fibre channel collector #1786
    + Expose cpu bugs and flags as info metrics. #1788
    + Add network_route collector #1811
    + Add zoneinfo collector #1922
  * Enhancements
    + Add more InfiniBand counters #1694
    + Add flag to aggr ipvs metrics to avoid high cardinality metrics #1709
    + Adding backlog/current queue length to qdisc collector #1732
    + Include TCP OutRsts in netstat metrics #1733
    + Add pool size to entropy collector #1753
    + Remove CGO dependencies for OpenBSD amd64 #1774
    + bcache: add writeback_rate_debug stats #1658
    + Add check state for mdadm arrays via node_md_state metric #1810
    + Expose XFS inode statistics #1870
    + Expose zfs zpool state #1878
    + Added an ability to pass collector.supervisord.url via SUPERVISORD_URL environment variable #1947
  * Bug fixes
    + filesystem_freebsd: Fix label values #1728
    + Fix various procfs parsing errors #1735
    + Handle no data from powersupplyclass #1747
    + udp_queues_linux.go: change upd to udp in two error strings #1769
    + Fix node_scrape_collector_success behaviour #1816
    + Fix NodeRAIDDegraded to not use a string rule expressions #1827
    + Fix node_md_disks state label from fail to failed #1862
    + Handle EPERM for syscall in timex collector #1938
    + bcache: fix typo in a metric name #1943
    + Fix XFS read/write stats (https://github.com/prometheus/procfs/pull/343)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614340800">- Trim old specfile constructs</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Update to 1.1.2
  * Bug fixes
    + Handle errors from disabled PSI subsystem #1983
    + Sanitize strings from /sys/class/power_supply #1984
    + Silence missing netclass errors #1986</changelog>
  <changelog author="pseidensal@suse.com" date="1632398400">- Apply patch to capture permission denied error for "energy_uj" file (bsc#1190535)
  * Adds patch capture-permission-denied-error-energy_uj.patch
    from https://github.com/prometheus/node_exporter/pull/2092</changelog>
  <changelog author="dominik.gedon@suse.com" date="1633089600">- Update to 1.2.2
  * Bug fixes
    Fix processes collector long int parsing #2112
- Update to 1.2.1
  * Removed
    Remove obsolete capture permission denied error patch
    capture-permission-denied-error-energy_uj.patch: Already included upstream
  * Bug fixes
    Fix zoneinfo parsing prometheus/procfs#386
    Fix nvme collector log noise #2091
    Fix rapl collector log noise #2092
- Update to 1.2.0
  * Changes
    Rename filesystem collector flags to match other collectors #2012
    Make node_exporter print usage to STDOUT #203
  * Features
    Add conntrack statistics metrics #1155
    Add ethtool stats collector #1832
    Add flag to ignore network speed if it is unknown #1989
    Add tapestats collector for Linux #2044
    Add nvme collector #2062
  * Enhancements
    Add ErrorLog plumbing to promhttp #1887
    Add more Infiniband counters #2019
    netclass: retrieve interface names and filter before parsing #2033
    Add time zone offset metric #2060
  * Bug fixes
    Handle errors from disabled PSI subsystem #1983
    Fix panic when using backwards compatible flags #2000
    Fix wrong value for OpenBSD memory buffer cache #2015
    Only initiate collectors once #2048
    Handle small backwards jumps in CPU idle #2067</changelog>
  <changelog author="michael@stroeder.com" date="1637236800">- Update to 1.3.0
  * [CHANGE] Add path label to rapl collector #2146
  * [CHANGE] Exclude filesystems under /run/credentials #2157
  * [CHANGE] Add TCPTimeouts to netstat default filter #2189
  * [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771
  * [FEATURE] Add darwin powersupply collector #1777
  * [FEATURE] Add support for monitoring GPUs on Linux #1998
  * [FEATURE] Add Darwin thermal collector #2032
  * [FEATURE] Add os release collector #2094
  * [FEATURE] Add netdev.address-info collector #2105
  * [FEATURE] Add clocksource metrics to time collector #2197
  * [ENHANCEMENT] Support glob textfile collector directories #1985
  * [ENHANCEMENT] ethtool: Expose node_ethtool_info metric #2080
  * [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165
  * [ENHANCEMENT] Add flag to disable guest CPU metrics #2123
  * [ENHANCEMENT] Add DMI collector #2131
  * [ENHANCEMENT] Add threads metrics to processes collector #2164
  * [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169
  * [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189
  * [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208
  * [BUGFIX] ethtool: Sanitize metric names #2093
  * [BUGFIX] Fix ethtool collector for multiple interfaces #2126
  * [BUGFIX] Fix possible panic on macOS #2133
  * [BUGFIX] Collect flag_info and bug_info only for one core #2156
  * [BUGFIX] Prevent duplicate ethtool metric names #2187</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646827200">- Update vendor tarball with prometheus/client_golang 1.11.1
  (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239, jsc#SUMA-114,
  CVE-2022-21698)
  + Added 0001-Update-prometheus-client-to-1.11.1.patch</changelog>
  <changelog author="tdehler@suse.com" date="1649851200">- Update spec file in order to make --version work (bsc#1196652)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1652184000">- Exclude s390 arch.</changelog>
  <changelog author="michael@stroeder.com" date="1656158400">- Update to 1.3.1
  * [BUGFIX] Handle nil CPU thermal power status on M1 #2218
  * [BUGFIX] bsd: Ignore filesystems flagged as MNT_IGNORE. #2227
  * [BUGFIX] Sanitize UTF-8 in dmi collector #2229</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352000">- BuildRequire go1.18 OR HIGHER (previously this was fixed to 1.14)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352001">- update to 1.4.0:
  * [CHANGE] Merge metrics descriptions in textfile collector #2475
  * [FEATURE] [node-mixin] Add darwin dashboard to mixin #2351
  * [FEATURE] Add "isolated" metric on cpu collector on linux #2251
  * [FEATURE] Add cgroup summary collector #2408
  * [FEATURE] Add selinux collector #2205
  * [FEATURE] Add slab info collector #2376
  * [FEATURE] Add sysctl collector #2425
  * [FEATURE] Also track the CPU Spin time for OpenBSD systems #1971
  * [FEATURE] Add support for MacOS version #2471
  * [ENHANCEMENT] [node-mixin] Add missing selectors #2426
  * [ENHANCEMENT] [node-mixin] Change current datasource to grafana's default #2281
  * [ENHANCEMENT] [node-mixin] Change disk graph to disk table #2364
  * [ENHANCEMENT] [node-mixin] Change io time units to %util #2375
  * [ENHANCEMENT] Ad user_wired_bytes and laundry_bytes on *bsd #2266
  * [ENHANCEMENT] Add additional vm_stat memory metrics for darwin #2240
  * [ENHANCEMENT] Add device filter flags to arp collector #2254
  * [ENHANCEMENT] Add diskstats include and exclude device flags #2417
  * [ENHANCEMENT] Add node_softirqs_total metric #2221
  * [ENHANCEMENT] Add rapl zone name label option #2401
  * [ENHANCEMENT] Add slabinfo collector #1799
  * [ENHANCEMENT] Allow user to select port on NTP server to query #2270
  * [ENHANCEMENT] collector/diskstats: Add labels and metrics from udev #2404
  * [ENHANCEMENT] Enable builds against older macOS SDK #2327
  * [ENHANCEMENT] qdisk-linux: Add exclude and include flags for interface name #2432
  * [ENHANCEMENT] systemd: Expose systemd minor version #2282
  * [ENHANCEMENT] Use netlink for tcpstat collector #2322
  * [ENHANCEMENT] Use netlink to get netdev stats #2074
  * [ENHANCEMENT] Add additional perf counters for stalled frontend/backend cycles #2191
  * [ENHANCEMENT] Add btrfs device error stats #2193
  * [BUGFIX] [node-mixin] Fix fsSpaceAvailableCriticalThreshold and fsSpaceAvailableWarning #2352
  * [BUGFIX] Fix concurrency issue in ethtool collector #2289
  * [BUGFIX] Fix concurrency issue in netdev collector #2267
  * [BUGFIX] Fix diskstat reads and write metrics for disks with different sector sizes #2311
  * [BUGFIX] Fix iostat on macos broken by deprecation warning #2292
  * [BUGFIX] Fix NodeFileDescriptorLimit alerts #2340
  * [BUGFIX] Sanitize rapl zone names #2299
  * [BUGFIX] Add file descriptor close safely in test #2447
  * [BUGFIX] Fix race condition in os_release.go #2454
  * [BUGFIX] Skip ZFS IO metrics if their paths are missing #2451</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352002">- update to 1.4.1:
  * [BUGFIX] Fix diskstats exclude flags #2487
  * [BUGFIX] Security: Update go/x/crypto and go/x/net
    (CVE-2022-27191, CVE-2022-27664)
  * [BUGFIX] Security: Update exporter-toolkit
    (CVE-2022-46146, bsc#1208064)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352003">- modify _service file and set all services to disabled
- remove patch 0001-Update-prometheus-client-to-1.11.1.patch
- update to 1.5.0 (jsc#PED-3578):
  * NOTE: This changes the Go runtime "GOMAXPROCS" to 1. This is done to limit the
    concurrency of the exporter to 1 CPU thread at a time in order to avoid a
    race condition problem in the Linux kernel (#2500) and parallel IO issues
    on nodes with high numbers of CPUs/CPU threads (#1880).
  * [CHANGE] Default GOMAXPROCS to 1 #2530
  * [FEATURE] Add multiple listeners and systemd socket listener activation #2393
  * [ENHANCEMENT] Add RTNL version of netclass collector #2492, #2528
  * [BUGFIX] Fix hwmon label sanitizer #2504
  * [BUGFIX] Use native endianness when encoding InetDiagMsg #2508
  * [BUGFIX] Fix btrfs device stats always being zero #2516</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678795200">- Remove node_exporter-1.5.0.tar.gz
- Execute tar and recompress service modules at buildtime</changelog>
  <changelog author="kastl@b1-systems.de" date="1679486400">- change go_modules archive in _service to use obscpio file</changelog>
  <changelog author="kastl@b1-systems.de" date="1685188800">- update to 1.6.0:
  * [CHANGE] Fix cpustat when some cpus are offline #2318
  * [CHANGE] Remove metrics of offline CPUs in CPU collector #2605
  * [CHANGE] Deprecate ntp collector #2603
  * [CHANGE] Remove bcache `cache_readaheads_totals` metrics #2583
  * [CHANGE] Deprecate supervisord collector #2685
  * [FEATURE] Enable uname collector on NetBSD #2559
  * [FEATURE] NetBSD support for the meminfo collector #2570
  * [FEATURE] NetBSD support for CPU collector #2626
  * [FEATURE] Add FreeBSD collector for netisr subsystem #2668
  * [FEATURE] Add softirqs collector #2669
  * [ENHANCEMENT] Add suspended as a `node_zfs_zpool_state` #2449
  * [ENHANCEMENT] Add administrative state of Linux network
    interfaces #2515
  * [ENHANCEMENT] Log current value of GOMAXPROCS #2537
  * [ENHANCEMENT] Add profiler options for perf collector #2542
  * [ENHANCEMENT] Allow root path as metrics path #2590
  * [ENHANCEMENT] Add cpu frequency governor metrics #2569
  * [ENHANCEMENT] Add new landing page #2622
  * [ENHANCEMENT] Reduce privileges needed for btrfs device stats
    [#2634]
  * [ENHANCEMENT] Add ZFS `memory_available_bytes` #2687
  * [ENHANCEMENT] Use `SCSI_IDENT_SERIAL` as serial in diskstats
    [#2612]
  * [ENHANCEMENT] Read missing from netlink netclass attributes
    from sysfs #2669
  * [BUGFIX] perf: fixes for automatically detecting the correct
    tracefs mountpoints #2553
  * [BUGFIX] Fix `thermal_zone` collector noise @2554
  * [BUGFIX] Fix a problem fetching the user wire count on FreeBSD
    2584
  * [BUGFIX] interrupts: Fix fields on linux aarch64 #2631
  * [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605
  * [BUGFIX] Fix OpenBSD filesystem collector string parsing #2637
  * [BUGFIX] Fix bad reporting of `node_cpu_seconds_total` in
    OpenBSD #2663</changelog>
  <changelog author="kastl@b1-systems.de" date="1699876800">- update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):
  * [FEATURE] Add ZFS freebsd per dataset stats #2753
  * [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721
  * [ENHANCEMENT] Parallelize stat calls in Linux filesystem
    collector #1772
  * [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711
  * [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric
    [#2778]
  * [ENHANCEMENT] Improve qdisc collector performance #2779
  * [ENHANCEMENT] Add include and exclude filter for hwmon
    collector #2699
  * [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead
    of procfs #2777
  * [BUFFIX] Fix ZFS arcstats on FreeBSD 14.0+ 2754
  * [BUGFIX] Fallback to 32-bit stats in netdev #2757
  * [BUGFIX] Close btrfs.FS handle after use #2780
  * [BUGFIX] Move RO status before error return #2807
  * [BUFFIX] Fix promhttp_metric_handler_errors_total being always
    active #2808
  * [BUGFIX] Fix nfsd v4 index miss #2824
- update to 1.6.1:
  (no source code changes in this release)
- BuildRequire go1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1707739200">- Add fix_arp_collector.patch
  Patch updates rtnetlink library to fix errors during ARP metrics
  collection.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708689600">- Add add_device_error_label.patch
  Patch adds `device_error` label for filesystem metrics.</changelog>
</package>
<package pkgid="717f4eb0d9fe9fc8095a1604e94ddb7e6d61b5c21a711efafdec8a02f510ad4a" name="google-cloud-sap-agent" arch="aarch64">
  <version epoch="0" ver="3.3" rel="150100.3.32.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464, bsc#1210465)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689163200">- Update to version 2.0 (bsc#1211516, bsc#1211517)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689768000">- Update to version 2.1 (bsc#1213397)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1692273600">- Install missing default configuration file (bsc#1214293)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 2.5
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697803200">- Update to version 2.6 (bsc#1215672, bsc#1215673)
  * Rolling back previous change for storing Project Number,
    Project ID is sufficient, no need to add complexity
  * Determine location of HANA global.ini using SAP system discovery logic
  * Add numeric project ID prefix to object name for ReadMetrics
  * Discovery now looks up and stores project number with discovery data
  * ReadMetrics updates for IAM permissions and bucket object names
  * fixing the bug in backoff logic, using separate policies
    for each collector and adding some logs
  * Backint migration from the old agent and supporting legacy parameters
  * adding new backoff policies for process metrics and fixing the
    bug in process metrics sapservice collector
  * Bump SAP Agent version to 2.6
  * Fix an issue where HANA hosts may not be discovered
    properly if hostname differs from instance name
  * Use Go 1.20 friendly sorting solution
  * adding retries in process metrics logic with backoffs
  * Fix parsing of instance (host/VM) name in Pacemaker pcmk_delay_max metric
  * Add the collection definition changes for the SAP HANA Topology metrics
  * Template for Cloud Monitoring Alerts for Backint errors
  * adding backoff to InstanceProperties to each collector
  * Reduced the number of parameters of startXX functions
    by consolidating them into respective structs
  * completing TODO (b/298315981): Create a map from skipped
    list metrics and pass it to collectors.
  * Proto package name changes to reflect the current path
  * Use instance_name instead of instance_id for baremetal systems
  * Decode encryption keys for Backint.
  * Moving hareplication metric to fast moving metrics
  * Added backoffs package in process metrics to keep the backoff policies
    and retry policies separately and make it reusable acrosss process metrics
  * Install Backint OTE
  * Adding skip list logic to process metrics
  * Separating fastmoving metrics into a separate file from other process metrics
  * Update remote collection to use collected instance's Cloud Properties
  * ReadMetrics upload to bucket and send status to monitoring
  * Remove local implementation of DW API in favor of using generated third_party version
  * ReadMetrics read input file and write results to local filesystem
  * Clean up command line executions to collect SAP Control metrics
  * Adding new OTE structure for ReadMetrics
  * Add the SUSE specific spec file to keep upstream changes and SUSE packaging in sync
  * Collect and report upcoming maintenance
  * Add basepath override and gcealpha functionality
  * Making proto changes for process metrics re-arch
  * Changes for generating HANA Insights locally into a markdown file
  * Delay feature specific daily action logs by 24 hours
    to avoid noise created by startup failures
  * Update to the rule "maximum_invalid_connect_attempts"
  * Add some missing related resources
  * Fix rate limiting for compression enabled uploads/downloads
  * Optional User-Agent parameter added to storage package client connection
  * Relocate gcealpha to /internal
  * Fix parse_test error
  * Retries added for opening files in Backint
  * Make processmetrics unit tests hermetic
  * Remove if-this-then-that requirement from WLM validation rule
  * Fix WriteInsight JSON encoding, and add missing elements
  * Add configuration value to change API endpoint for Data Warehouse calls
  * Storage package progress messages based off of read/writes directly to the bucket
  * Make Collect DB Metrics as NO-OP when metrics are being read from override file
  * Remove unused field from backint proto
  * Custom retries for the storage package with exponential backoff and MaxRetries setting</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1701172800">- Update to version 2.8 (bsc#1217373, bsc#1217374)
  * Bump agent version to 2.8 to support C3/M3 certification
  * Update go.yml to use go 1.21
  * Switch from "slices" to "go_exp.../slices" for go version dependency
  * Use newly refactored discovery packages.
  * Fixes issue with diskname from source or device name
  * Adds extreme disk type IOps and Throughput for host metrics
  * Add `INTEGRATION` target config environment for collection definition testing
  * Add project number to SAP System proto
  * Add a cache to discovered resources. This reduces the number of API
    calls needed to perform System Discovery
  * Replace windows wmic hardware queries with PowerShell wmi queries
  * Fix test flakiness
  * Improve development process for collection definition configuration
  * HANA PD based snapshot and restore - changes to add wait for uploading
  * Fix for kokoro build issue in processmetrics/networkstats
  * GCBDR SAPCoreAPP Package in Agent for SAP
  * Add version tracking for WLM validation config
  * Send workload validation config to remote instances for use during remote collection
  * Add flag for passing in workload validation config into remote collection OTE
  * Bump google.golang.org/grpc from 1.58.2 to 1.58.3
- from version 2.7
  * Added ote for hma dashboards migration
  * Increase Max backoff in storage package to 300 seconds
  * Added subpaths for collection of required TCP metrics
  * Add more debug logs and increase the wait-time for PD operations in restore
  * No public description
  * Add 30 second timeout to read/write from the local file system for Backint
  * No public description
  * Adds RHEL 9 VM Manager policy
  * Extract cloud-related discovery functions into separate file
  * Adding timeout to systemReplication.py command execution
  * Allow download attempts without verifying connection to bucket
  * Invoke `collectiondefinition.Start` when starting the agent in daemon mode
  * SAP Agent CLI - usability improvements for flags and help menu
  * Add host project information to HANA DB component discovery data.
  * Use proto names for default configuration during Backint installation
  * Extending logging capabilities to all packages of the agent
  * Added a feature for exposing TCP connection metrics
  * Migrating context logging logic to all packages of SAP Agent
  * Add an ifthisthenthatlint to ensure new script is kept in sync with rule proto
  * (collectiondefition) - Discard unknown fields and remove breaking metrics
  * Moving commandlineexecutor from internal to shared for sqlserveragent
  * Define startup function for collectiondefinition package
  * Check error on close of destFile in backint restore
  * Allow trailing zeros for millisecond timestamps in Backint
  * Add pid to all agent logs
  * Bump SAP Agent version to 2.7 (placeholder release version)
  * Separate collection definition validation functionality into a separate file
  * Add datetime to migration folder for Backint installation
  * Add symlink for Backint log file to install directory
  * Set a deadline for the final flush to cloud logging
  * Increase chunk retry deadline in storage package
  * Fix order dependent tests in sapagent/internal/storage
  * Change support bundle feature to collect the OTE logs from new path
  * Usage logging for remote WLM validation metrics collection from the collector instance
  * Extract discovery functions performed on the host to a separate file
  * Improve agent shutdown experience in daemon mode
  * Fix Backint restoring incorrect file
  * Google Events - rule proto initial submission
  * Move gce package to shared folder for use by SQL Server agent
  * Add GCS integration into collectiondefinition package
  * Standardize import aliases
  * go mod updates
  * Fixing go/gotsan data race error in processmetrics_test
  * Add Backint support for Inquire line: `#EBID &lt;external_backup_id&gt;`
  * Chown Backint install directories to user/group of the opt/ folder
  * Create OTE logs under a subdir under /var/log as /var/log is only writable by root
  * Will not create an empty log file for logusage logs and one
    time execution logs will have 0666 file mode
  * Setting the log file created to world read+write permission
  * Bump golang.org/x/net from 0.15.0 to 0.17.0
  * Add recovery_bucket parameter to Backint
  * Extract SAP related discovery functions to a separate file
  * Fix Backint install directory
  * Fix Backint parallel uploads
  * Move maintenance collector to beta API
  * Pruning batches to prevent time series duplication
  * Added a logger for incorporating service context keys in logs
  * Encode the DB password string to handle passwords with special characters
  * Handling non error scenarios better in netweaver.go
  * Internal change
  * fixes typo on backint install
  * Allow all users to execute google_cloud_sap_agent
  * Fix hdbbackint script.
  * Subdirs for Backint DIAGNOSE temporary files
  * Report zero-value metrics for upcoming maintenance
  * Clean up gcealpha functionality
  * Fix default configuration values in daemon and backint
  * Update the comment in proto to reflect that the metric
    path in skip list should start with /sap
  * Implemented separation of context of different services</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706184000">- Update to version 3.0 (bsc#1218736, bsc#1218737)
  * Suppress packemaker command error to debug to avoid log flooding
  * Expand load balancing cluster discovery.
  * Log success messages in OTEs to STDOUT instead of STDERR used by log.Print
  * Use bash always to avoid variation of behavior across OS/Shell types
  * Minor updates to installbackint.
  * Backint compose step properly saves metadata.
  * Fix issue with discovery on ASCS instances.
  * hanadiskrestore - fix the format of disktype string for disk create API
  * Fix issue with PCS cluster address discovery.
  * Update transform to insight
  * Rename HANA backup/restore OTEs to reflect they are supported
    for all disks and not just persistent disk
  * Increase the timeout for HDB stop to account for busy DBs
  * Adding project sap-ecs-testing to the list.
  * PD Restore - Support provisioned-iops and provisioned-throughput
  * Integration test for configure OTE
  * Added precondition in hana pd backup for stripped LVM
  * Add a precondition check to verify user has passed a valid
    snapshot name that is present in the current project
  * Update the usage to reflect additional required param
  * Minor path update for supportbundle OTE.
  * Fixing bug in slow moving metrics partial collection scenarios
  * Adding check for agent status after restart.
  * Ensure Backint ComposeChunks has a valid bucket handle
  * Discover whether a Netweaver instance is ABAP or Java
  * Replace standard slices package with third party version
  * WLM HANA metric `ha_in_same_zone` now reports instance
    names for HA nodes in the same zone
  * Fix data race condition for Backint Backup with new client connections
  * Make -new-disk-name a required parameter to avoid the 63 char
    limit in the name length due to auto-generated names
  * Fix command for collecting Corosync metric `two_node_runtime`
  * Make snapshot name similar to disk name
  * Bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * Enable Discovery config flag controls submission
    to Data Warehouse and Cloud Logging
  * Create new clients for each operation in Backint
  * Add `client_endpoint` to Backint proto.
  * Getting the build number into the version for display
  * Backint config name change: service_account to service_account_key
  * Add HANA HA metrics to collection definition.
  * Fix sorting bug in a diff in apps_discovery_test.go
  * Add discoverHANATenantDBs to main code path
  * Change PIPE filemode to WRONLY to allow us to detect broken pipes
  * Deprecate `sap_system_discovery` config field in favor of `enable_discovery`
  * Move the validation of whether user passed correct PD, before stopping HANA
  * Add a placeholder for public doc link with next steps
    after hanapdrestore workflow has completed
  * Fix executable path for HDB version command
  * Add optional param `new-disk-name` to hanapdrestore
    for users that wish to override the default
  * Sort the skipmetrics in unit test to avoid order related flakes
  * Generalizing configure OTE
  * Discover Netweaver kernel version
  * Fix Sprintf call
  * Use SAP System data to determine if HANA HA nodes share the same zone.
  * hanapdrestore - do not delete PDs in case of failures
  * Create discoverHANATenantDBs method to support multiple SIDs for HANA tenant DBs
  * Send additional fields in Data Warehouse WriteInsightRequest
  * Updating the username parameters for hana pd backup and restore
  * Retrieve Reliability data every 2 hours instead of 24
  * Discover HANA version
  * Fix import for GitHub build
  * Add instance properties, and topology information to system data
  * Keep the device nam and disk name same after restore
  * Move sapdiscovery package into system package
  * Changer the default name of the disk created by restore workflow
  * Updates the generated protobuf go for system.proto
  * Update generated system proto
  * Update go.yml
  * Add topology and instance properties info to SAP System data
  * Add a check to verify the disk is attached to instance, fail if disk is not attached
  * Add application and database software properties to system representation
  * Fix race condition in heartbeat test case
  * Add error handling to restore workflow to try and keep
    the HANA system in a clean state on failures
  * Enable LogToCloud by default for both OTE and Daemon modes
  * Bump Agent version to 3.0
  * Reliability OTE added to SAP Agent
  * Declare public Get interface for SAP System discovery data
  * Integration testing for Networkstats Package
  * Adding project sap-ecs-testing to the list
  * Adding one time execution for enabling/disabling of features
  * Change to using custom retries for initial bucket connection
  * Default collection definition to be fetched from GCS
  * Add a 2 minute context timeout for initial bucket connection
  * Add `collection_config_version` as a WLM system metric
  * Make project, host param optional for hanapdbackup,
    in addition make user param optional for hanapdrestore
  * Fix potential nil dereference WLM metrics collection
  * Add force-stop-hana to restore workflow to forcefully stop
    HANA when the param is passed
  * Rename the HANA PD snapshot and restore workflows
  * Add unit tests for GetProvisionIOps and GetProvisionedThoughput
  * Remove the TestCollect unit test which relies on nc
    command which can be flaky in unit tests
  * Increase Backint timeout for PIPE files to 3 minutes
  * Add XFS freeze and unfreeze to PD based snapshot</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708430400">- Update to version 3.1 (bsc#1220010, bsc#1220111)
  * Fixing system replication status code being returned
  * Reduce disk snapshot wait durations
  * Fix test flakes in workloadcollector test.
  * adding metrics for db freeze time and total workflow time
  * Fix for SAP System discovery adding the current host to all components.
  * Restore default WLM metric collection settings.
  * change description of validate OTE
  * fix a typo in the command name and add a delay before we try the unmount
  * Use underscore as separator for flags in place of hyphens
  * Enable host_metrics and disable reliability_metrics by default in configure OTE
  * Collect reliability metrics in the free namespace
  * Remove user from cmd params for HANA Replication
  * Enable workload manager metric collection by default.
  * Add support configuration flag to enable legacy WLM metric data submission workflow.
  * Lowers the log level of discovery to info
  * Fix for HANA Replication Config
  * Add additional instance-id parameter for users who do not want to provide port number
  * Use _ instead of - for parameters in configurebackint
  * Implementing panic recovery to HANA Monitoring: CreateWorkerPool
  * Fix issue with process metrics subroutine starting.
  * Add a flag to enable or disable workload discovery.
  * Reduce logs in sapdiscovery to debug, these are now run a
    lot more frequently and are flooding the logs
  * Use bucket `cloudsapdeploystaging` for staging environment.
  * Updates default value handling for system discovery flag.
  * Added default values to some frequency flags in configure OTE
  * force a sync before unmounting to clear out stale file handles
  * Retain recoverable routine in process metrics.
  * Ensures slow metrics workers stop on context cancellation.
  * Log lsof output if unmount fails during restore
  * SAP Discovery - Discover R3trans data
  * Add panic recovery to collectiondefinition update routine
  * configurebackint OTE.
  * Adding panic recovery to remote.go
  * Prevent host metrics from restarting the daily metrics report if it has already been started.
  * Add panic recovery to agent metrics
  * Implementing panic recovery for hana monitoring: logging action daily
  * Routines now use their own context and cancel in the event of a panic recovery.
  * Add panic recovery to host metrics routines
  * Removed -path flag and fixed usage string
  * Add workload properties to the SAP System definition.
  * Add panic recovery to collectMetricsFromConfig routines.
  * Add panic recovery to fast metric collection routine.
  * Reduces the log severity to debug for the exponential backoff policy
  * Add panic recovery to heartbeat routine.
  * Updating configuration.json file to remove deprecated sap_discovery field
  * Use protojson instead of custom function for snake_case marshaling
  * Add panic recovery to WLM metrics collection
  * HANA Insights rules tranche 11: Create unit tests and add to auto push
  * Add panic recovery to workload collector daily usage metrics.
  * Processmetrics - suppress Error and Warn logs that really need to be debug
  * Formatting the output of messages printed by configure OTE
  * Changing flag names of configure OTE to align better with configuration.json fields
  * Add automatic panic recovery to slow metrics collection
  * Add panic recovery to goroutine collectAndSend
  * Add panic recovery to goroutine
  * Retain recoverable routines beyond function scope.
  * Implement recovery handler for SAP System discovery package
  * Tranche 11: HRE Rules
  * Update github build
  * Adds generic panic recovery to SAP System discovery package
  * Initialize the sidadm env to ensure restore can be run as root user
  * not pacaking gcbdr scripts till launch of the feature
  * Change datatype of frequency flags from string to int
  * Breaking down --frequency flag into separate flags for different features for better isolation
  * Fix configuration.json file from being written in camelCase to snake_case
  * Tranche 6,7,8,9,10: HRE Rules
  * Suppress pacemaker related log from Error to Debug
  * creating the OTE for GCBDR discovery
  * Update HA node identification
  * Tranche 10: HRE Rules
  * Update file permissions and ownership for installbackint when running as root.
  * Adding newline after version print.
  * Exposing HANA Logical volumes availability metrics
  * Make workloadmanager parameters test more robust.
  * Fix panic in cloud discovery
  * Tranche 10: HRE Rules
  * Add recovery_folder_prefix parameter to Backint.
  * Mark process_metrics_send_frequency as deprecated
  * Add snapshot-type param to hanadiskbackup with default as STANDARD
    type. Users can override to ARCHIVE type if needed.
  * Add new folder_prefix parameter to Backint.
  * Add HANA new HANA insight rules to BUILD file and embed sources
  * Tranche 10a: HRE Rules
  * Tranche 6b: HRE Rules
  * Tranche 8b: HRE Rules
  * Fix for sending isABAP value
  * Updating logusage command line flags</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Update to version 3.2 (bsc#1222215, bsc#1222216)
  * Remove internal gensupport package.
  * Restore additional error handling and response checking to internal data warehouse client.
  * Updating the aggregate function in HANA insight rules
  * Remove a leftover debug log
  * Allow multipart uploads for PIPE file types.
  * Update go-hdb version to v1.8.0
  * Perform log restores in serial rather than parallel.
  * Add sample usage examples to commandlineexecutor
  * Small update to configureinstance OTE
  * Add nil check in backup and restore flows to protect against panics.
  * Close http response body in WriteInsight() and soap.go
  * Record topology type.
  * Initialize usagemetrics for OTEs
  * Add Instance Number to SAP System instance properties
  * Set `min_version` for WLM `os_settings` system metric.
  * Increase timeout for saptune re-apply commands.
  * Adding handling for encrypted snapshots in backup and restore
  * Change the version check comparisons to account for versions
    older than those listed in SAP Note.
  * Skip the Netweaver metrics that need dpmon on NW kernels
    affected by SAP Note: 3366597
  * Fix imports
  * No public description
  * Use internal data warehouse client.
  * Fix disp+work command invocation for Netweaver Kernel version discovery.
  * Add note about default parameter values to installbackint.
  * Add mutex in multipart writer for potential data races.
  * Update go.mod and go.sum
  * Skip XFS freeze by default unless user passes a parameter to do it explicitly
  * configureinstance minor updates.
  * Add safety check for usage metrics on BMS
  * Storage Class parameter added to Backint.
  * Update configureinstance's X4 saptune conf.
  * XML Multipart Write() and Close() methods completed.
  * Fixes the vmmanager policies for sles12 and sles15 used in the cloud console removes
    the individual cloud console policies and consolidates them into one Adds a general
    gcloud command line policy
  * Standardize logging for workloadmanager package.
  * Multipart XML API Uploads for Backint.
  * Add database system SID to database properties.
  * Fix NW HA node identification for RedHat deployments.
  * Add workload properties to discovery object returned by discoverSAPSystems
  * Add ASCS instance number to application data
  * Add Workload Manager validation rule for checking OS settings.
  * Enable WLM metric collection by default, disable submission of data to Cloud Monitoring.
  * Decoupling primary executable command and providing an alternative to lsof
  * Added HANA version in support bundle collection
  * Add WorkloadProperties to merged system details and to WLM Insights
  * Replace the link placeholder with the actual link
  * Add instance number to SAP discovery data
  * Tranche 12: HRE Rules
  * Minor typo fix in workloadmanager's hana metrics module
  * Add pacemaker metrics with SID labels to process metrics
  * updating the regex for backup and backint files to take care of log rotation in support bundle
  * Add support for disk snapshot labels for easy lifecycle management of snapshots
  * Added new OTE for changedisktype workflow
  * Add WorkloadProperties to SapSystemDetails for apps_discovery
  * Testing the timeseries in unit tests instead of just checking the count
  * Record Netweaver kernel version.
  * Tranche 12: HRE Rules
  * Testing the timeseries in unit tests instead of just checking the count
  * Testing the timeseries in unit tests instead of just checking the count
  * Relocating pacemaker collection related packages to internal/pacemaker
    for common use between process metrics and WLM
  * Use results from latest round of discovery for the collection of process metrics.
  * Handling zero rows returned case better in HANA insights
  * Adding docstrings to workloadmanager package
  * Adding docstring to configure OTE
  * adding docstrings to methods in support bundle
  * Add X4 specific configurations to configureinstance OTE.
  * Add helper functions to configureinstance OTE.
  * Display updates for HANA Insights WLM rules rollout.
  * configureinstance OTE
  * We expect the command to return a non-zero exit code and we should not be
    returning an error. Execute treats non-zero exit code as error.
  * Removing the sap control process command line params
  * Revert "Fixing system replication status code being returned"
  * configureinstance OTE
  * We expect the command to return a non-zero exit code and we should not be
    returning an error. Execute treats non-zero exit code as error.
  * Removing the sap control process command line params
  * Fixing system replication status code being returned
  * Wait for hdbindex server to stop after HANA is stopped
  * Log error to console in cases where LVM is not being used
  * Adding JournalCTL logs to support bunddle
  * hanadiskbckup - Add missing params to the Usage string
  * Move usagemetrics package into shared folder
  * Fixed data race error in TestCollectAndSendSlowMovingMetrics()
  * Disk backup/restore - Enable send-metrics-to-monitoring by default</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1717156800">- Update to version 3.3 (bsc#1225166, bsc#1225558)
  * Build updated to use -mod=vendor during build
  * Updated go.mod and go.sum with dependencies for safetext,
    using go mod vendor for github action
  * Add actual values and comments to usagemetrics.go to ensure that
    error and action codes are only appended to the end of the list.
  * Remove usage metrics from configureinstance.go
  * Add a hard Disable for reliability metrics collection
    until the namespace is created and tested.
  * Adding metrics for time taken by each query
  * Add SHA224 of labels as a new label.
  * Remove collect_reliability_metrics from configuration.json
  * Small tweaks to backint log and inquire path generation
  * Fix for unmarshalling backint configuration.
  * Implementation of instant snapshot group backup workflow
  * Backint changes around shorten_folder_path
  * Rename max_diagnose_size_gb to diagnose_file_max_size_gb
  * Adding start and finish logs in performance diagnostics
  * Validate that all disks mapped to /hana/data belong to the same consistency group.
  * Rename backint monitoring metrics parameter
  * Trim folder prefix for Backint INQUIRE output.
  * Add the ability to test the database connection
  * Reduce log level of some storage messages to debug.
  * Finalize guest action request and response format.
  * Backint dashboard fix logs
  * Add scorecards to backint dashboard
  * Making proto changes for HANA Monitoring support
    for multiple tennats and ha setup
  * Add total upload/download time to log.
  * Add HANA indexserver.ini metrics to WLM metric collection.
  * Add Netweaver role metrics as part of process metrics
  * Rotate old support bundles.
  * Update the default value of confirm-data-snapshot-after-create
    to false. and add to usage()
  * Add option to confirm HANA snapshot as successful before disk snapshot is uploaded.
  * Change log level from warn to info for non-critical messages.
  * Add diagnose_folder parameter to Backint
  * Add a 1 GB buffer to needed bytes for diagnostic
  * Add labels to group snapshot backup.
  * Enable the show status and restart agent functions for Windows.
  * Add WLM metric collection for num_completion_queues and num_submit_queues.
  * Collect support bundle on Backint errors.
  * Adding usage metrics to performance diagnostics
  * Collect agent-only support bundle on failure of backint and hanadiskbackup.
  * Minor Backint improvements
  * Add ability collect only agent logs using agent-logs-only flag to supportbundle
  * Bump version to 3.3
  * Add Backint metrics dashboard
  * DO NOT remove log files on uninstall
  * Adding more unit tests
  * Changing location of zipped file to within the
    final folder identified by unique timestamp.
  * Minor refactorings and improvements with increasing code coverage
  * Make sure DB instance number is recorded in System data.
  * Change configuration.json to 0664 to ensure world cannot write.
  * Add Netweaver Java discovery to SAP Agent.
  * Add a new version of functions to read cloud properties from metadata server.
  * Updating generated protos to proc-gen-go v1.34.1
  * Updating runConfigureInstance method and adding unit tests
    for covering configure instance ote invocation
  * Zip the final bundle and add upload functionality
  * Record database SID alongside tenant DB SIDs
  * Reduce log severity in discovery
  * Add HANA version to product version data
  * Fix race condition in tests
  * Read disk mapping from instance info if source disk
    is not provided to hanadiskbackup
  * Add option to shorten the folder path in the bucket.
  * Add SSL support for cmdline-based querying and some bugfixes
  * Move recovery package to shared directory.
  * Update protoc-gen-go version to v1.34.0 in multiple protos
  * Adding FIO commands to performance diagnostics
  * Remove error logs when errors are being returned
  * Adding perfdiag to performance diagnostics
  * Add AppInstance data to discovery data uploads.
  * Introduce protos for guestactions messages and responses.
    Support multiple commands per message.
  * Update wording for HANA Insights rules.
  * Configureinstance updates.
  * Adding a check for retention policy before performing backup operation.
  * Remove the unused loglevel flag from logusage OTE
  * Change the language around the default parameters being
    optimized for performance in backint
  * Add instance role to SAP System properties
  * Increase wait time for index server to stop.
  * Integrating backint OTE into performancediagnostics
  * Update wording around configureinstance unsupported machine type.
  * Pass the right disk name to check if disk is attached
  * Integrating new DB Handle and hdbuserstore key support
    with remaining HANA DB dependant workflows
  * Refactor HANA and filesystems specific code to a common hanabackup package
  * Bumps x/net dependency to v0.23
  * Append HANA Insights rule to WLM fake metrics file in script to generate WLM rule.
  * Integrating configure instance ote in performance diagnostics
  * Update disk backup OTE to parse paths even with /dev/mapper
    in the middle of path, not necessarily as a prefix
  * Adding a few missing labels to wlm-fake-metrics.yaml
  * Changing loglevel for onetime.Init() calls
  * Refactor change - Move PD related functions to gce.go
  * Fix agentcommunication import replace statements
  * Update replace functions for new open source dependencies.
  * Set up scaffolding for guest actions handling in SAP Agent along with UAP library code
  * Backint upload/download metrics sent to cloud monitoring.
  * Cleaning up the performance diagntics file wth recent changes
  * Fixes to usage strings in OTEs for optional params
  * Integrating new database connector with HANA Monitoring
    and adding support for HDBUserstore Key
  * Implement hdbsql commandline result parsing
  * SAP Discovery - Add SAP Instance Numbers to instance properties
  * Updating OTEs to include params for when OTE is invoked internally
  * Modifying flags to follow design changes
  * Create fake WLM metric overrides for testing
  * Implement constructors and query functions for querying
    HANA DB via hdbuserstore using cmdline
  * Skeleton for querying HANA DB via hdbuserstore using cmdline
  * Parameterize Backint Diagnose max file size.
  * Metadata parameter added to Backint.
  * Adding initial layout for performance diagnostics OTE
  * Create a new API CreateClient() in shared logging which
    returns an error in case of failures
  * Backint no longer writes ERROR if temporary chunk failed to delete.
  * Create onetime.Init() to condense reused code.
  * Fixing a typo in a process metrics retry logic comment
  * Rename workload_validation param with workload_evaluation in configure OTE
  * Send agent version in Write Insight requests
  * Ensuring /sap/cluster/resources covers all the nodes.</changelog>
</package>
<package pkgid="7facf0a2f9a7de535403cf845a5981cf6542806c0a3c2f2baa63691c96777c3c" name="google-cloud-sap-agent" arch="ppc64le">
  <version epoch="0" ver="3.3" rel="150100.3.32.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464, bsc#1210465)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689163200">- Update to version 2.0 (bsc#1211516, bsc#1211517)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689768000">- Update to version 2.1 (bsc#1213397)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1692273600">- Install missing default configuration file (bsc#1214293)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 2.5
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697803200">- Update to version 2.6 (bsc#1215672, bsc#1215673)
  * Rolling back previous change for storing Project Number,
    Project ID is sufficient, no need to add complexity
  * Determine location of HANA global.ini using SAP system discovery logic
  * Add numeric project ID prefix to object name for ReadMetrics
  * Discovery now looks up and stores project number with discovery data
  * ReadMetrics updates for IAM permissions and bucket object names
  * fixing the bug in backoff logic, using separate policies
    for each collector and adding some logs
  * Backint migration from the old agent and supporting legacy parameters
  * adding new backoff policies for process metrics and fixing the
    bug in process metrics sapservice collector
  * Bump SAP Agent version to 2.6
  * Fix an issue where HANA hosts may not be discovered
    properly if hostname differs from instance name
  * Use Go 1.20 friendly sorting solution
  * adding retries in process metrics logic with backoffs
  * Fix parsing of instance (host/VM) name in Pacemaker pcmk_delay_max metric
  * Add the collection definition changes for the SAP HANA Topology metrics
  * Template for Cloud Monitoring Alerts for Backint errors
  * adding backoff to InstanceProperties to each collector
  * Reduced the number of parameters of startXX functions
    by consolidating them into respective structs
  * completing TODO (b/298315981): Create a map from skipped
    list metrics and pass it to collectors.
  * Proto package name changes to reflect the current path
  * Use instance_name instead of instance_id for baremetal systems
  * Decode encryption keys for Backint.
  * Moving hareplication metric to fast moving metrics
  * Added backoffs package in process metrics to keep the backoff policies
    and retry policies separately and make it reusable acrosss process metrics
  * Install Backint OTE
  * Adding skip list logic to process metrics
  * Separating fastmoving metrics into a separate file from other process metrics
  * Update remote collection to use collected instance's Cloud Properties
  * ReadMetrics upload to bucket and send status to monitoring
  * Remove local implementation of DW API in favor of using generated third_party version
  * ReadMetrics read input file and write results to local filesystem
  * Clean up command line executions to collect SAP Control metrics
  * Adding new OTE structure for ReadMetrics
  * Add the SUSE specific spec file to keep upstream changes and SUSE packaging in sync
  * Collect and report upcoming maintenance
  * Add basepath override and gcealpha functionality
  * Making proto changes for process metrics re-arch
  * Changes for generating HANA Insights locally into a markdown file
  * Delay feature specific daily action logs by 24 hours
    to avoid noise created by startup failures
  * Update to the rule "maximum_invalid_connect_attempts"
  * Add some missing related resources
  * Fix rate limiting for compression enabled uploads/downloads
  * Optional User-Agent parameter added to storage package client connection
  * Relocate gcealpha to /internal
  * Fix parse_test error
  * Retries added for opening files in Backint
  * Make processmetrics unit tests hermetic
  * Remove if-this-then-that requirement from WLM validation rule
  * Fix WriteInsight JSON encoding, and add missing elements
  * Add configuration value to change API endpoint for Data Warehouse calls
  * Storage package progress messages based off of read/writes directly to the bucket
  * Make Collect DB Metrics as NO-OP when metrics are being read from override file
  * Remove unused field from backint proto
  * Custom retries for the storage package with exponential backoff and MaxRetries setting</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1701172800">- Update to version 2.8 (bsc#1217373, bsc#1217374)
  * Bump agent version to 2.8 to support C3/M3 certification
  * Update go.yml to use go 1.21
  * Switch from "slices" to "go_exp.../slices" for go version dependency
  * Use newly refactored discovery packages.
  * Fixes issue with diskname from source or device name
  * Adds extreme disk type IOps and Throughput for host metrics
  * Add `INTEGRATION` target config environment for collection definition testing
  * Add project number to SAP System proto
  * Add a cache to discovered resources. This reduces the number of API
    calls needed to perform System Discovery
  * Replace windows wmic hardware queries with PowerShell wmi queries
  * Fix test flakiness
  * Improve development process for collection definition configuration
  * HANA PD based snapshot and restore - changes to add wait for uploading
  * Fix for kokoro build issue in processmetrics/networkstats
  * GCBDR SAPCoreAPP Package in Agent for SAP
  * Add version tracking for WLM validation config
  * Send workload validation config to remote instances for use during remote collection
  * Add flag for passing in workload validation config into remote collection OTE
  * Bump google.golang.org/grpc from 1.58.2 to 1.58.3
- from version 2.7
  * Added ote for hma dashboards migration
  * Increase Max backoff in storage package to 300 seconds
  * Added subpaths for collection of required TCP metrics
  * Add more debug logs and increase the wait-time for PD operations in restore
  * No public description
  * Add 30 second timeout to read/write from the local file system for Backint
  * No public description
  * Adds RHEL 9 VM Manager policy
  * Extract cloud-related discovery functions into separate file
  * Adding timeout to systemReplication.py command execution
  * Allow download attempts without verifying connection to bucket
  * Invoke `collectiondefinition.Start` when starting the agent in daemon mode
  * SAP Agent CLI - usability improvements for flags and help menu
  * Add host project information to HANA DB component discovery data.
  * Use proto names for default configuration during Backint installation
  * Extending logging capabilities to all packages of the agent
  * Added a feature for exposing TCP connection metrics
  * Migrating context logging logic to all packages of SAP Agent
  * Add an ifthisthenthatlint to ensure new script is kept in sync with rule proto
  * (collectiondefition) - Discard unknown fields and remove breaking metrics
  * Moving commandlineexecutor from internal to shared for sqlserveragent
  * Define startup function for collectiondefinition package
  * Check error on close of destFile in backint restore
  * Allow trailing zeros for millisecond timestamps in Backint
  * Add pid to all agent logs
  * Bump SAP Agent version to 2.7 (placeholder release version)
  * Separate collection definition validation functionality into a separate file
  * Add datetime to migration folder for Backint installation
  * Add symlink for Backint log file to install directory
  * Set a deadline for the final flush to cloud logging
  * Increase chunk retry deadline in storage package
  * Fix order dependent tests in sapagent/internal/storage
  * Change support bundle feature to collect the OTE logs from new path
  * Usage logging for remote WLM validation metrics collection from the collector instance
  * Extract discovery functions performed on the host to a separate file
  * Improve agent shutdown experience in daemon mode
  * Fix Backint restoring incorrect file
  * Google Events - rule proto initial submission
  * Move gce package to shared folder for use by SQL Server agent
  * Add GCS integration into collectiondefinition package
  * Standardize import aliases
  * go mod updates
  * Fixing go/gotsan data race error in processmetrics_test
  * Add Backint support for Inquire line: `#EBID &lt;external_backup_id&gt;`
  * Chown Backint install directories to user/group of the opt/ folder
  * Create OTE logs under a subdir under /var/log as /var/log is only writable by root
  * Will not create an empty log file for logusage logs and one
    time execution logs will have 0666 file mode
  * Setting the log file created to world read+write permission
  * Bump golang.org/x/net from 0.15.0 to 0.17.0
  * Add recovery_bucket parameter to Backint
  * Extract SAP related discovery functions to a separate file
  * Fix Backint install directory
  * Fix Backint parallel uploads
  * Move maintenance collector to beta API
  * Pruning batches to prevent time series duplication
  * Added a logger for incorporating service context keys in logs
  * Encode the DB password string to handle passwords with special characters
  * Handling non error scenarios better in netweaver.go
  * Internal change
  * fixes typo on backint install
  * Allow all users to execute google_cloud_sap_agent
  * Fix hdbbackint script.
  * Subdirs for Backint DIAGNOSE temporary files
  * Report zero-value metrics for upcoming maintenance
  * Clean up gcealpha functionality
  * Fix default configuration values in daemon and backint
  * Update the comment in proto to reflect that the metric
    path in skip list should start with /sap
  * Implemented separation of context of different services</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706184000">- Update to version 3.0 (bsc#1218736, bsc#1218737)
  * Suppress packemaker command error to debug to avoid log flooding
  * Expand load balancing cluster discovery.
  * Log success messages in OTEs to STDOUT instead of STDERR used by log.Print
  * Use bash always to avoid variation of behavior across OS/Shell types
  * Minor updates to installbackint.
  * Backint compose step properly saves metadata.
  * Fix issue with discovery on ASCS instances.
  * hanadiskrestore - fix the format of disktype string for disk create API
  * Fix issue with PCS cluster address discovery.
  * Update transform to insight
  * Rename HANA backup/restore OTEs to reflect they are supported
    for all disks and not just persistent disk
  * Increase the timeout for HDB stop to account for busy DBs
  * Adding project sap-ecs-testing to the list.
  * PD Restore - Support provisioned-iops and provisioned-throughput
  * Integration test for configure OTE
  * Added precondition in hana pd backup for stripped LVM
  * Add a precondition check to verify user has passed a valid
    snapshot name that is present in the current project
  * Update the usage to reflect additional required param
  * Minor path update for supportbundle OTE.
  * Fixing bug in slow moving metrics partial collection scenarios
  * Adding check for agent status after restart.
  * Ensure Backint ComposeChunks has a valid bucket handle
  * Discover whether a Netweaver instance is ABAP or Java
  * Replace standard slices package with third party version
  * WLM HANA metric `ha_in_same_zone` now reports instance
    names for HA nodes in the same zone
  * Fix data race condition for Backint Backup with new client connections
  * Make -new-disk-name a required parameter to avoid the 63 char
    limit in the name length due to auto-generated names
  * Fix command for collecting Corosync metric `two_node_runtime`
  * Make snapshot name similar to disk name
  * Bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * Enable Discovery config flag controls submission
    to Data Warehouse and Cloud Logging
  * Create new clients for each operation in Backint
  * Add `client_endpoint` to Backint proto.
  * Getting the build number into the version for display
  * Backint config name change: service_account to service_account_key
  * Add HANA HA metrics to collection definition.
  * Fix sorting bug in a diff in apps_discovery_test.go
  * Add discoverHANATenantDBs to main code path
  * Change PIPE filemode to WRONLY to allow us to detect broken pipes
  * Deprecate `sap_system_discovery` config field in favor of `enable_discovery`
  * Move the validation of whether user passed correct PD, before stopping HANA
  * Add a placeholder for public doc link with next steps
    after hanapdrestore workflow has completed
  * Fix executable path for HDB version command
  * Add optional param `new-disk-name` to hanapdrestore
    for users that wish to override the default
  * Sort the skipmetrics in unit test to avoid order related flakes
  * Generalizing configure OTE
  * Discover Netweaver kernel version
  * Fix Sprintf call
  * Use SAP System data to determine if HANA HA nodes share the same zone.
  * hanapdrestore - do not delete PDs in case of failures
  * Create discoverHANATenantDBs method to support multiple SIDs for HANA tenant DBs
  * Send additional fields in Data Warehouse WriteInsightRequest
  * Updating the username parameters for hana pd backup and restore
  * Retrieve Reliability data every 2 hours instead of 24
  * Discover HANA version
  * Fix import for GitHub build
  * Add instance properties, and topology information to system data
  * Keep the device nam and disk name same after restore
  * Move sapdiscovery package into system package
  * Changer the default name of the disk created by restore workflow
  * Updates the generated protobuf go for system.proto
  * Update generated system proto
  * Update go.yml
  * Add topology and instance properties info to SAP System data
  * Add a check to verify the disk is attached to instance, fail if disk is not attached
  * Add application and database software properties to system representation
  * Fix race condition in heartbeat test case
  * Add error handling to restore workflow to try and keep
    the HANA system in a clean state on failures
  * Enable LogToCloud by default for both OTE and Daemon modes
  * Bump Agent version to 3.0
  * Reliability OTE added to SAP Agent
  * Declare public Get interface for SAP System discovery data
  * Integration testing for Networkstats Package
  * Adding project sap-ecs-testing to the list
  * Adding one time execution for enabling/disabling of features
  * Change to using custom retries for initial bucket connection
  * Default collection definition to be fetched from GCS
  * Add a 2 minute context timeout for initial bucket connection
  * Add `collection_config_version` as a WLM system metric
  * Make project, host param optional for hanapdbackup,
    in addition make user param optional for hanapdrestore
  * Fix potential nil dereference WLM metrics collection
  * Add force-stop-hana to restore workflow to forcefully stop
    HANA when the param is passed
  * Rename the HANA PD snapshot and restore workflows
  * Add unit tests for GetProvisionIOps and GetProvisionedThoughput
  * Remove the TestCollect unit test which relies on nc
    command which can be flaky in unit tests
  * Increase Backint timeout for PIPE files to 3 minutes
  * Add XFS freeze and unfreeze to PD based snapshot</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708430400">- Update to version 3.1 (bsc#1220010, bsc#1220111)
  * Fixing system replication status code being returned
  * Reduce disk snapshot wait durations
  * Fix test flakes in workloadcollector test.
  * adding metrics for db freeze time and total workflow time
  * Fix for SAP System discovery adding the current host to all components.
  * Restore default WLM metric collection settings.
  * change description of validate OTE
  * fix a typo in the command name and add a delay before we try the unmount
  * Use underscore as separator for flags in place of hyphens
  * Enable host_metrics and disable reliability_metrics by default in configure OTE
  * Collect reliability metrics in the free namespace
  * Remove user from cmd params for HANA Replication
  * Enable workload manager metric collection by default.
  * Add support configuration flag to enable legacy WLM metric data submission workflow.
  * Lowers the log level of discovery to info
  * Fix for HANA Replication Config
  * Add additional instance-id parameter for users who do not want to provide port number
  * Use _ instead of - for parameters in configurebackint
  * Implementing panic recovery to HANA Monitoring: CreateWorkerPool
  * Fix issue with process metrics subroutine starting.
  * Add a flag to enable or disable workload discovery.
  * Reduce logs in sapdiscovery to debug, these are now run a
    lot more frequently and are flooding the logs
  * Use bucket `cloudsapdeploystaging` for staging environment.
  * Updates default value handling for system discovery flag.
  * Added default values to some frequency flags in configure OTE
  * force a sync before unmounting to clear out stale file handles
  * Retain recoverable routine in process metrics.
  * Ensures slow metrics workers stop on context cancellation.
  * Log lsof output if unmount fails during restore
  * SAP Discovery - Discover R3trans data
  * Add panic recovery to collectiondefinition update routine
  * configurebackint OTE.
  * Adding panic recovery to remote.go
  * Prevent host metrics from restarting the daily metrics report if it has already been started.
  * Add panic recovery to agent metrics
  * Implementing panic recovery for hana monitoring: logging action daily
  * Routines now use their own context and cancel in the event of a panic recovery.
  * Add panic recovery to host metrics routines
  * Removed -path flag and fixed usage string
  * Add workload properties to the SAP System definition.
  * Add panic recovery to collectMetricsFromConfig routines.
  * Add panic recovery to fast metric collection routine.
  * Reduces the log severity to debug for the exponential backoff policy
  * Add panic recovery to heartbeat routine.
  * Updating configuration.json file to remove deprecated sap_discovery field
  * Use protojson instead of custom function for snake_case marshaling
  * Add panic recovery to WLM metrics collection
  * HANA Insights rules tranche 11: Create unit tests and add to auto push
  * Add panic recovery to workload collector daily usage metrics.
  * Processmetrics - suppress Error and Warn logs that really need to be debug
  * Formatting the output of messages printed by configure OTE
  * Changing flag names of configure OTE to align better with configuration.json fields
  * Add automatic panic recovery to slow metrics collection
  * Add panic recovery to goroutine collectAndSend
  * Add panic recovery to goroutine
  * Retain recoverable routines beyond function scope.
  * Implement recovery handler for SAP System discovery package
  * Tranche 11: HRE Rules
  * Update github build
  * Adds generic panic recovery to SAP System discovery package
  * Initialize the sidadm env to ensure restore can be run as root user
  * not pacaking gcbdr scripts till launch of the feature
  * Change datatype of frequency flags from string to int
  * Breaking down --frequency flag into separate flags for different features for better isolation
  * Fix configuration.json file from being written in camelCase to snake_case
  * Tranche 6,7,8,9,10: HRE Rules
  * Suppress pacemaker related log from Error to Debug
  * creating the OTE for GCBDR discovery
  * Update HA node identification
  * Tranche 10: HRE Rules
  * Update file permissions and ownership for installbackint when running as root.
  * Adding newline after version print.
  * Exposing HANA Logical volumes availability metrics
  * Make workloadmanager parameters test more robust.
  * Fix panic in cloud discovery
  * Tranche 10: HRE Rules
  * Add recovery_folder_prefix parameter to Backint.
  * Mark process_metrics_send_frequency as deprecated
  * Add snapshot-type param to hanadiskbackup with default as STANDARD
    type. Users can override to ARCHIVE type if needed.
  * Add new folder_prefix parameter to Backint.
  * Add HANA new HANA insight rules to BUILD file and embed sources
  * Tranche 10a: HRE Rules
  * Tranche 6b: HRE Rules
  * Tranche 8b: HRE Rules
  * Fix for sending isABAP value
  * Updating logusage command line flags</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Update to version 3.2 (bsc#1222215, bsc#1222216)
  * Remove internal gensupport package.
  * Restore additional error handling and response checking to internal data warehouse client.
  * Updating the aggregate function in HANA insight rules
  * Remove a leftover debug log
  * Allow multipart uploads for PIPE file types.
  * Update go-hdb version to v1.8.0
  * Perform log restores in serial rather than parallel.
  * Add sample usage examples to commandlineexecutor
  * Small update to configureinstance OTE
  * Add nil check in backup and restore flows to protect against panics.
  * Close http response body in WriteInsight() and soap.go
  * Record topology type.
  * Initialize usagemetrics for OTEs
  * Add Instance Number to SAP System instance properties
  * Set `min_version` for WLM `os_settings` system metric.
  * Increase timeout for saptune re-apply commands.
  * Adding handling for encrypted snapshots in backup and restore
  * Change the version check comparisons to account for versions
    older than those listed in SAP Note.
  * Skip the Netweaver metrics that need dpmon on NW kernels
    affected by SAP Note: 3366597
  * Fix imports
  * No public description
  * Use internal data warehouse client.
  * Fix disp+work command invocation for Netweaver Kernel version discovery.
  * Add note about default parameter values to installbackint.
  * Add mutex in multipart writer for potential data races.
  * Update go.mod and go.sum
  * Skip XFS freeze by default unless user passes a parameter to do it explicitly
  * configureinstance minor updates.
  * Add safety check for usage metrics on BMS
  * Storage Class parameter added to Backint.
  * Update configureinstance's X4 saptune conf.
  * XML Multipart Write() and Close() methods completed.
  * Fixes the vmmanager policies for sles12 and sles15 used in the cloud console removes
    the individual cloud console policies and consolidates them into one Adds a general
    gcloud command line policy
  * Standardize logging for workloadmanager package.
  * Multipart XML API Uploads for Backint.
  * Add database system SID to database properties.
  * Fix NW HA node identification for RedHat deployments.
  * Add workload properties to discovery object returned by discoverSAPSystems
  * Add ASCS instance number to application data
  * Add Workload Manager validation rule for checking OS settings.
  * Enable WLM metric collection by default, disable submission of data to Cloud Monitoring.
  * Decoupling primary executable command and providing an alternative to lsof
  * Added HANA version in support bundle collection
  * Add WorkloadProperties to merged system details and to WLM Insights
  * Replace the link placeholder with the actual link
  * Add instance number to SAP discovery data
  * Tranche 12: HRE Rules
  * Minor typo fix in workloadmanager's hana metrics module
  * Add pacemaker metrics with SID labels to process metrics
  * updating the regex for backup and backint files to take care of log rotation in support bundle
  * Add support for disk snapshot labels for easy lifecycle management of snapshots
  * Added new OTE for changedisktype workflow
  * Add WorkloadProperties to SapSystemDetails for apps_discovery
  * Testing the timeseries in unit tests instead of just checking the count
  * Record Netweaver kernel version.
  * Tranche 12: HRE Rules
  * Testing the timeseries in unit tests instead of just checking the count
  * Testing the timeseries in unit tests instead of just checking the count
  * Relocating pacemaker collection related packages to internal/pacemaker
    for common use between process metrics and WLM
  * Use results from latest round of discovery for the collection of process metrics.
  * Handling zero rows returned case better in HANA insights
  * Adding docstrings to workloadmanager package
  * Adding docstring to configure OTE
  * adding docstrings to methods in support bundle
  * Add X4 specific configurations to configureinstance OTE.
  * Add helper functions to configureinstance OTE.
  * Display updates for HANA Insights WLM rules rollout.
  * configureinstance OTE
  * We expect the command to return a non-zero exit code and we should not be
    returning an error. Execute treats non-zero exit code as error.
  * Removing the sap control process command line params
  * Revert "Fixing system replication status code being returned"
  * configureinstance OTE
  * We expect the command to return a non-zero exit code and we should not be
    returning an error. Execute treats non-zero exit code as error.
  * Removing the sap control process command line params
  * Fixing system replication status code being returned
  * Wait for hdbindex server to stop after HANA is stopped
  * Log error to console in cases where LVM is not being used
  * Adding JournalCTL logs to support bunddle
  * hanadiskbckup - Add missing params to the Usage string
  * Move usagemetrics package into shared folder
  * Fixed data race error in TestCollectAndSendSlowMovingMetrics()
  * Disk backup/restore - Enable send-metrics-to-monitoring by default</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1717156800">- Update to version 3.3 (bsc#1225166, bsc#1225558)
  * Build updated to use -mod=vendor during build
  * Updated go.mod and go.sum with dependencies for safetext,
    using go mod vendor for github action
  * Add actual values and comments to usagemetrics.go to ensure that
    error and action codes are only appended to the end of the list.
  * Remove usage metrics from configureinstance.go
  * Add a hard Disable for reliability metrics collection
    until the namespace is created and tested.
  * Adding metrics for time taken by each query
  * Add SHA224 of labels as a new label.
  * Remove collect_reliability_metrics from configuration.json
  * Small tweaks to backint log and inquire path generation
  * Fix for unmarshalling backint configuration.
  * Implementation of instant snapshot group backup workflow
  * Backint changes around shorten_folder_path
  * Rename max_diagnose_size_gb to diagnose_file_max_size_gb
  * Adding start and finish logs in performance diagnostics
  * Validate that all disks mapped to /hana/data belong to the same consistency group.
  * Rename backint monitoring metrics parameter
  * Trim folder prefix for Backint INQUIRE output.
  * Add the ability to test the database connection
  * Reduce log level of some storage messages to debug.
  * Finalize guest action request and response format.
  * Backint dashboard fix logs
  * Add scorecards to backint dashboard
  * Making proto changes for HANA Monitoring support
    for multiple tennats and ha setup
  * Add total upload/download time to log.
  * Add HANA indexserver.ini metrics to WLM metric collection.
  * Add Netweaver role metrics as part of process metrics
  * Rotate old support bundles.
  * Update the default value of confirm-data-snapshot-after-create
    to false. and add to usage()
  * Add option to confirm HANA snapshot as successful before disk snapshot is uploaded.
  * Change log level from warn to info for non-critical messages.
  * Add diagnose_folder parameter to Backint
  * Add a 1 GB buffer to needed bytes for diagnostic
  * Add labels to group snapshot backup.
  * Enable the show status and restart agent functions for Windows.
  * Add WLM metric collection for num_completion_queues and num_submit_queues.
  * Collect support bundle on Backint errors.
  * Adding usage metrics to performance diagnostics
  * Collect agent-only support bundle on failure of backint and hanadiskbackup.
  * Minor Backint improvements
  * Add ability collect only agent logs using agent-logs-only flag to supportbundle
  * Bump version to 3.3
  * Add Backint metrics dashboard
  * DO NOT remove log files on uninstall
  * Adding more unit tests
  * Changing location of zipped file to within the
    final folder identified by unique timestamp.
  * Minor refactorings and improvements with increasing code coverage
  * Make sure DB instance number is recorded in System data.
  * Change configuration.json to 0664 to ensure world cannot write.
  * Add Netweaver Java discovery to SAP Agent.
  * Add a new version of functions to read cloud properties from metadata server.
  * Updating generated protos to proc-gen-go v1.34.1
  * Updating runConfigureInstance method and adding unit tests
    for covering configure instance ote invocation
  * Zip the final bundle and add upload functionality
  * Record database SID alongside tenant DB SIDs
  * Reduce log severity in discovery
  * Add HANA version to product version data
  * Fix race condition in tests
  * Read disk mapping from instance info if source disk
    is not provided to hanadiskbackup
  * Add option to shorten the folder path in the bucket.
  * Add SSL support for cmdline-based querying and some bugfixes
  * Move recovery package to shared directory.
  * Update protoc-gen-go version to v1.34.0 in multiple protos
  * Adding FIO commands to performance diagnostics
  * Remove error logs when errors are being returned
  * Adding perfdiag to performance diagnostics
  * Add AppInstance data to discovery data uploads.
  * Introduce protos for guestactions messages and responses.
    Support multiple commands per message.
  * Update wording for HANA Insights rules.
  * Configureinstance updates.
  * Adding a check for retention policy before performing backup operation.
  * Remove the unused loglevel flag from logusage OTE
  * Change the language around the default parameters being
    optimized for performance in backint
  * Add instance role to SAP System properties
  * Increase wait time for index server to stop.
  * Integrating backint OTE into performancediagnostics
  * Update wording around configureinstance unsupported machine type.
  * Pass the right disk name to check if disk is attached
  * Integrating new DB Handle and hdbuserstore key support
    with remaining HANA DB dependant workflows
  * Refactor HANA and filesystems specific code to a common hanabackup package
  * Bumps x/net dependency to v0.23
  * Append HANA Insights rule to WLM fake metrics file in script to generate WLM rule.
  * Integrating configure instance ote in performance diagnostics
  * Update disk backup OTE to parse paths even with /dev/mapper
    in the middle of path, not necessarily as a prefix
  * Adding a few missing labels to wlm-fake-metrics.yaml
  * Changing loglevel for onetime.Init() calls
  * Refactor change - Move PD related functions to gce.go
  * Fix agentcommunication import replace statements
  * Update replace functions for new open source dependencies.
  * Set up scaffolding for guest actions handling in SAP Agent along with UAP library code
  * Backint upload/download metrics sent to cloud monitoring.
  * Cleaning up the performance diagntics file wth recent changes
  * Fixes to usage strings in OTEs for optional params
  * Integrating new database connector with HANA Monitoring
    and adding support for HDBUserstore Key
  * Implement hdbsql commandline result parsing
  * SAP Discovery - Add SAP Instance Numbers to instance properties
  * Updating OTEs to include params for when OTE is invoked internally
  * Modifying flags to follow design changes
  * Create fake WLM metric overrides for testing
  * Implement constructors and query functions for querying
    HANA DB via hdbuserstore using cmdline
  * Skeleton for querying HANA DB via hdbuserstore using cmdline
  * Parameterize Backint Diagnose max file size.
  * Metadata parameter added to Backint.
  * Adding initial layout for performance diagnostics OTE
  * Create a new API CreateClient() in shared logging which
    returns an error in case of failures
  * Backint no longer writes ERROR if temporary chunk failed to delete.
  * Create onetime.Init() to condense reused code.
  * Fixing a typo in a process metrics retry logic comment
  * Rename workload_validation param with workload_evaluation in configure OTE
  * Send agent version in Write Insight requests
  * Ensuring /sap/cluster/resources covers all the nodes.</changelog>
</package>
<package pkgid="97b9a5e453ea13a3c56104ac2a425ae39a6a77aba3046a44b4a538b25a1c6723" name="google-cloud-sap-agent" arch="s390x">
  <version epoch="0" ver="3.3" rel="150100.3.32.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464, bsc#1210465)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689163200">- Update to version 2.0 (bsc#1211516, bsc#1211517)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689768000">- Update to version 2.1 (bsc#1213397)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1692273600">- Install missing default configuration file (bsc#1214293)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 2.5
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697803200">- Update to version 2.6 (bsc#1215672, bsc#1215673)
  * Rolling back previous change for storing Project Number,
    Project ID is sufficient, no need to add complexity
  * Determine location of HANA global.ini using SAP system discovery logic
  * Add numeric project ID prefix to object name for ReadMetrics
  * Discovery now looks up and stores project number with discovery data
  * ReadMetrics updates for IAM permissions and bucket object names
  * fixing the bug in backoff logic, using separate policies
    for each collector and adding some logs
  * Backint migration from the old agent and supporting legacy parameters
  * adding new backoff policies for process metrics and fixing the
    bug in process metrics sapservice collector
  * Bump SAP Agent version to 2.6
  * Fix an issue where HANA hosts may not be discovered
    properly if hostname differs from instance name
  * Use Go 1.20 friendly sorting solution
  * adding retries in process metrics logic with backoffs
  * Fix parsing of instance (host/VM) name in Pacemaker pcmk_delay_max metric
  * Add the collection definition changes for the SAP HANA Topology metrics
  * Template for Cloud Monitoring Alerts for Backint errors
  * adding backoff to InstanceProperties to each collector
  * Reduced the number of parameters of startXX functions
    by consolidating them into respective structs
  * completing TODO (b/298315981): Create a map from skipped
    list metrics and pass it to collectors.
  * Proto package name changes to reflect the current path
  * Use instance_name instead of instance_id for baremetal systems
  * Decode encryption keys for Backint.
  * Moving hareplication metric to fast moving metrics
  * Added backoffs package in process metrics to keep the backoff policies
    and retry policies separately and make it reusable acrosss process metrics
  * Install Backint OTE
  * Adding skip list logic to process metrics
  * Separating fastmoving metrics into a separate file from other process metrics
  * Update remote collection to use collected instance's Cloud Properties
  * ReadMetrics upload to bucket and send status to monitoring
  * Remove local implementation of DW API in favor of using generated third_party version
  * ReadMetrics read input file and write results to local filesystem
  * Clean up command line executions to collect SAP Control metrics
  * Adding new OTE structure for ReadMetrics
  * Add the SUSE specific spec file to keep upstream changes and SUSE packaging in sync
  * Collect and report upcoming maintenance
  * Add basepath override and gcealpha functionality
  * Making proto changes for process metrics re-arch
  * Changes for generating HANA Insights locally into a markdown file
  * Delay feature specific daily action logs by 24 hours
    to avoid noise created by startup failures
  * Update to the rule "maximum_invalid_connect_attempts"
  * Add some missing related resources
  * Fix rate limiting for compression enabled uploads/downloads
  * Optional User-Agent parameter added to storage package client connection
  * Relocate gcealpha to /internal
  * Fix parse_test error
  * Retries added for opening files in Backint
  * Make processmetrics unit tests hermetic
  * Remove if-this-then-that requirement from WLM validation rule
  * Fix WriteInsight JSON encoding, and add missing elements
  * Add configuration value to change API endpoint for Data Warehouse calls
  * Storage package progress messages based off of read/writes directly to the bucket
  * Make Collect DB Metrics as NO-OP when metrics are being read from override file
  * Remove unused field from backint proto
  * Custom retries for the storage package with exponential backoff and MaxRetries setting</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1701172800">- Update to version 2.8 (bsc#1217373, bsc#1217374)
  * Bump agent version to 2.8 to support C3/M3 certification
  * Update go.yml to use go 1.21
  * Switch from "slices" to "go_exp.../slices" for go version dependency
  * Use newly refactored discovery packages.
  * Fixes issue with diskname from source or device name
  * Adds extreme disk type IOps and Throughput for host metrics
  * Add `INTEGRATION` target config environment for collection definition testing
  * Add project number to SAP System proto
  * Add a cache to discovered resources. This reduces the number of API
    calls needed to perform System Discovery
  * Replace windows wmic hardware queries with PowerShell wmi queries
  * Fix test flakiness
  * Improve development process for collection definition configuration
  * HANA PD based snapshot and restore - changes to add wait for uploading
  * Fix for kokoro build issue in processmetrics/networkstats
  * GCBDR SAPCoreAPP Package in Agent for SAP
  * Add version tracking for WLM validation config
  * Send workload validation config to remote instances for use during remote collection
  * Add flag for passing in workload validation config into remote collection OTE
  * Bump google.golang.org/grpc from 1.58.2 to 1.58.3
- from version 2.7
  * Added ote for hma dashboards migration
  * Increase Max backoff in storage package to 300 seconds
  * Added subpaths for collection of required TCP metrics
  * Add more debug logs and increase the wait-time for PD operations in restore
  * No public description
  * Add 30 second timeout to read/write from the local file system for Backint
  * No public description
  * Adds RHEL 9 VM Manager policy
  * Extract cloud-related discovery functions into separate file
  * Adding timeout to systemReplication.py command execution
  * Allow download attempts without verifying connection to bucket
  * Invoke `collectiondefinition.Start` when starting the agent in daemon mode
  * SAP Agent CLI - usability improvements for flags and help menu
  * Add host project information to HANA DB component discovery data.
  * Use proto names for default configuration during Backint installation
  * Extending logging capabilities to all packages of the agent
  * Added a feature for exposing TCP connection metrics
  * Migrating context logging logic to all packages of SAP Agent
  * Add an ifthisthenthatlint to ensure new script is kept in sync with rule proto
  * (collectiondefition) - Discard unknown fields and remove breaking metrics
  * Moving commandlineexecutor from internal to shared for sqlserveragent
  * Define startup function for collectiondefinition package
  * Check error on close of destFile in backint restore
  * Allow trailing zeros for millisecond timestamps in Backint
  * Add pid to all agent logs
  * Bump SAP Agent version to 2.7 (placeholder release version)
  * Separate collection definition validation functionality into a separate file
  * Add datetime to migration folder for Backint installation
  * Add symlink for Backint log file to install directory
  * Set a deadline for the final flush to cloud logging
  * Increase chunk retry deadline in storage package
  * Fix order dependent tests in sapagent/internal/storage
  * Change support bundle feature to collect the OTE logs from new path
  * Usage logging for remote WLM validation metrics collection from the collector instance
  * Extract discovery functions performed on the host to a separate file
  * Improve agent shutdown experience in daemon mode
  * Fix Backint restoring incorrect file
  * Google Events - rule proto initial submission
  * Move gce package to shared folder for use by SQL Server agent
  * Add GCS integration into collectiondefinition package
  * Standardize import aliases
  * go mod updates
  * Fixing go/gotsan data race error in processmetrics_test
  * Add Backint support for Inquire line: `#EBID &lt;external_backup_id&gt;`
  * Chown Backint install directories to user/group of the opt/ folder
  * Create OTE logs under a subdir under /var/log as /var/log is only writable by root
  * Will not create an empty log file for logusage logs and one
    time execution logs will have 0666 file mode
  * Setting the log file created to world read+write permission
  * Bump golang.org/x/net from 0.15.0 to 0.17.0
  * Add recovery_bucket parameter to Backint
  * Extract SAP related discovery functions to a separate file
  * Fix Backint install directory
  * Fix Backint parallel uploads
  * Move maintenance collector to beta API
  * Pruning batches to prevent time series duplication
  * Added a logger for incorporating service context keys in logs
  * Encode the DB password string to handle passwords with special characters
  * Handling non error scenarios better in netweaver.go
  * Internal change
  * fixes typo on backint install
  * Allow all users to execute google_cloud_sap_agent
  * Fix hdbbackint script.
  * Subdirs for Backint DIAGNOSE temporary files
  * Report zero-value metrics for upcoming maintenance
  * Clean up gcealpha functionality
  * Fix default configuration values in daemon and backint
  * Update the comment in proto to reflect that the metric
    path in skip list should start with /sap
  * Implemented separation of context of different services</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706184000">- Update to version 3.0 (bsc#1218736, bsc#1218737)
  * Suppress packemaker command error to debug to avoid log flooding
  * Expand load balancing cluster discovery.
  * Log success messages in OTEs to STDOUT instead of STDERR used by log.Print
  * Use bash always to avoid variation of behavior across OS/Shell types
  * Minor updates to installbackint.
  * Backint compose step properly saves metadata.
  * Fix issue with discovery on ASCS instances.
  * hanadiskrestore - fix the format of disktype string for disk create API
  * Fix issue with PCS cluster address discovery.
  * Update transform to insight
  * Rename HANA backup/restore OTEs to reflect they are supported
    for all disks and not just persistent disk
  * Increase the timeout for HDB stop to account for busy DBs
  * Adding project sap-ecs-testing to the list.
  * PD Restore - Support provisioned-iops and provisioned-throughput
  * Integration test for configure OTE
  * Added precondition in hana pd backup for stripped LVM
  * Add a precondition check to verify user has passed a valid
    snapshot name that is present in the current project
  * Update the usage to reflect additional required param
  * Minor path update for supportbundle OTE.
  * Fixing bug in slow moving metrics partial collection scenarios
  * Adding check for agent status after restart.
  * Ensure Backint ComposeChunks has a valid bucket handle
  * Discover whether a Netweaver instance is ABAP or Java
  * Replace standard slices package with third party version
  * WLM HANA metric `ha_in_same_zone` now reports instance
    names for HA nodes in the same zone
  * Fix data race condition for Backint Backup with new client connections
  * Make -new-disk-name a required parameter to avoid the 63 char
    limit in the name length due to auto-generated names
  * Fix command for collecting Corosync metric `two_node_runtime`
  * Make snapshot name similar to disk name
  * Bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * Enable Discovery config flag controls submission
    to Data Warehouse and Cloud Logging
  * Create new clients for each operation in Backint
  * Add `client_endpoint` to Backint proto.
  * Getting the build number into the version for display
  * Backint config name change: service_account to service_account_key
  * Add HANA HA metrics to collection definition.
  * Fix sorting bug in a diff in apps_discovery_test.go
  * Add discoverHANATenantDBs to main code path
  * Change PIPE filemode to WRONLY to allow us to detect broken pipes
  * Deprecate `sap_system_discovery` config field in favor of `enable_discovery`
  * Move the validation of whether user passed correct PD, before stopping HANA
  * Add a placeholder for public doc link with next steps
    after hanapdrestore workflow has completed
  * Fix executable path for HDB version command
  * Add optional param `new-disk-name` to hanapdrestore
    for users that wish to override the default
  * Sort the skipmetrics in unit test to avoid order related flakes
  * Generalizing configure OTE
  * Discover Netweaver kernel version
  * Fix Sprintf call
  * Use SAP System data to determine if HANA HA nodes share the same zone.
  * hanapdrestore - do not delete PDs in case of failures
  * Create discoverHANATenantDBs method to support multiple SIDs for HANA tenant DBs
  * Send additional fields in Data Warehouse WriteInsightRequest
  * Updating the username parameters for hana pd backup and restore
  * Retrieve Reliability data every 2 hours instead of 24
  * Discover HANA version
  * Fix import for GitHub build
  * Add instance properties, and topology information to system data
  * Keep the device nam and disk name same after restore
  * Move sapdiscovery package into system package
  * Changer the default name of the disk created by restore workflow
  * Updates the generated protobuf go for system.proto
  * Update generated system proto
  * Update go.yml
  * Add topology and instance properties info to SAP System data
  * Add a check to verify the disk is attached to instance, fail if disk is not attached
  * Add application and database software properties to system representation
  * Fix race condition in heartbeat test case
  * Add error handling to restore workflow to try and keep
    the HANA system in a clean state on failures
  * Enable LogToCloud by default for both OTE and Daemon modes
  * Bump Agent version to 3.0
  * Reliability OTE added to SAP Agent
  * Declare public Get interface for SAP System discovery data
  * Integration testing for Networkstats Package
  * Adding project sap-ecs-testing to the list
  * Adding one time execution for enabling/disabling of features
  * Change to using custom retries for initial bucket connection
  * Default collection definition to be fetched from GCS
  * Add a 2 minute context timeout for initial bucket connection
  * Add `collection_config_version` as a WLM system metric
  * Make project, host param optional for hanapdbackup,
    in addition make user param optional for hanapdrestore
  * Fix potential nil dereference WLM metrics collection
  * Add force-stop-hana to restore workflow to forcefully stop
    HANA when the param is passed
  * Rename the HANA PD snapshot and restore workflows
  * Add unit tests for GetProvisionIOps and GetProvisionedThoughput
  * Remove the TestCollect unit test which relies on nc
    command which can be flaky in unit tests
  * Increase Backint timeout for PIPE files to 3 minutes
  * Add XFS freeze and unfreeze to PD based snapshot</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708430400">- Update to version 3.1 (bsc#1220010, bsc#1220111)
  * Fixing system replication status code being returned
  * Reduce disk snapshot wait durations
  * Fix test flakes in workloadcollector test.
  * adding metrics for db freeze time and total workflow time
  * Fix for SAP System discovery adding the current host to all components.
  * Restore default WLM metric collection settings.
  * change description of validate OTE
  * fix a typo in the command name and add a delay before we try the unmount
  * Use underscore as separator for flags in place of hyphens
  * Enable host_metrics and disable reliability_metrics by default in configure OTE
  * Collect reliability metrics in the free namespace
  * Remove user from cmd params for HANA Replication
  * Enable workload manager metric collection by default.
  * Add support configuration flag to enable legacy WLM metric data submission workflow.
  * Lowers the log level of discovery to info
  * Fix for HANA Replication Config
  * Add additional instance-id parameter for users who do not want to provide port number
  * Use _ instead of - for parameters in configurebackint
  * Implementing panic recovery to HANA Monitoring: CreateWorkerPool
  * Fix issue with process metrics subroutine starting.
  * Add a flag to enable or disable workload discovery.
  * Reduce logs in sapdiscovery to debug, these are now run a
    lot more frequently and are flooding the logs
  * Use bucket `cloudsapdeploystaging` for staging environment.
  * Updates default value handling for system discovery flag.
  * Added default values to some frequency flags in configure OTE
  * force a sync before unmounting to clear out stale file handles
  * Retain recoverable routine in process metrics.
  * Ensures slow metrics workers stop on context cancellation.
  * Log lsof output if unmount fails during restore
  * SAP Discovery - Discover R3trans data
  * Add panic recovery to collectiondefinition update routine
  * configurebackint OTE.
  * Adding panic recovery to remote.go
  * Prevent host metrics from restarting the daily metrics report if it has already been started.
  * Add panic recovery to agent metrics
  * Implementing panic recovery for hana monitoring: logging action daily
  * Routines now use their own context and cancel in the event of a panic recovery.
  * Add panic recovery to host metrics routines
  * Removed -path flag and fixed usage string
  * Add workload properties to the SAP System definition.
  * Add panic recovery to collectMetricsFromConfig routines.
  * Add panic recovery to fast metric collection routine.
  * Reduces the log severity to debug for the exponential backoff policy
  * Add panic recovery to heartbeat routine.
  * Updating configuration.json file to remove deprecated sap_discovery field
  * Use protojson instead of custom function for snake_case marshaling
  * Add panic recovery to WLM metrics collection
  * HANA Insights rules tranche 11: Create unit tests and add to auto push
  * Add panic recovery to workload collector daily usage metrics.
  * Processmetrics - suppress Error and Warn logs that really need to be debug
  * Formatting the output of messages printed by configure OTE
  * Changing flag names of configure OTE to align better with configuration.json fields
  * Add automatic panic recovery to slow metrics collection
  * Add panic recovery to goroutine collectAndSend
  * Add panic recovery to goroutine
  * Retain recoverable routines beyond function scope.
  * Implement recovery handler for SAP System discovery package
  * Tranche 11: HRE Rules
  * Update github build
  * Adds generic panic recovery to SAP System discovery package
  * Initialize the sidadm env to ensure restore can be run as root user
  * not pacaking gcbdr scripts till launch of the feature
  * Change datatype of frequency flags from string to int
  * Breaking down --frequency flag into separate flags for different features for better isolation
  * Fix configuration.json file from being written in camelCase to snake_case
  * Tranche 6,7,8,9,10: HRE Rules
  * Suppress pacemaker related log from Error to Debug
  * creating the OTE for GCBDR discovery
  * Update HA node identification
  * Tranche 10: HRE Rules
  * Update file permissions and ownership for installbackint when running as root.
  * Adding newline after version print.
  * Exposing HANA Logical volumes availability metrics
  * Make workloadmanager parameters test more robust.
  * Fix panic in cloud discovery
  * Tranche 10: HRE Rules
  * Add recovery_folder_prefix parameter to Backint.
  * Mark process_metrics_send_frequency as deprecated
  * Add snapshot-type param to hanadiskbackup with default as STANDARD
    type. Users can override to ARCHIVE type if needed.
  * Add new folder_prefix parameter to Backint.
  * Add HANA new HANA insight rules to BUILD file and embed sources
  * Tranche 10a: HRE Rules
  * Tranche 6b: HRE Rules
  * Tranche 8b: HRE Rules
  * Fix for sending isABAP value
  * Updating logusage command line flags</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Update to version 3.2 (bsc#1222215, bsc#1222216)
  * Remove internal gensupport package.
  * Restore additional error handling and response checking to internal data warehouse client.
  * Updating the aggregate function in HANA insight rules
  * Remove a leftover debug log
  * Allow multipart uploads for PIPE file types.
  * Update go-hdb version to v1.8.0
  * Perform log restores in serial rather than parallel.
  * Add sample usage examples to commandlineexecutor
  * Small update to configureinstance OTE
  * Add nil check in backup and restore flows to protect against panics.
  * Close http response body in WriteInsight() and soap.go
  * Record topology type.
  * Initialize usagemetrics for OTEs
  * Add Instance Number to SAP System instance properties
  * Set `min_version` for WLM `os_settings` system metric.
  * Increase timeout for saptune re-apply commands.
  * Adding handling for encrypted snapshots in backup and restore
  * Change the version check comparisons to account for versions
    older than those listed in SAP Note.
  * Skip the Netweaver metrics that need dpmon on NW kernels
    affected by SAP Note: 3366597
  * Fix imports
  * No public description
  * Use internal data warehouse client.
  * Fix disp+work command invocation for Netweaver Kernel version discovery.
  * Add note about default parameter values to installbackint.
  * Add mutex in multipart writer for potential data races.
  * Update go.mod and go.sum
  * Skip XFS freeze by default unless user passes a parameter to do it explicitly
  * configureinstance minor updates.
  * Add safety check for usage metrics on BMS
  * Storage Class parameter added to Backint.
  * Update configureinstance's X4 saptune conf.
  * XML Multipart Write() and Close() methods completed.
  * Fixes the vmmanager policies for sles12 and sles15 used in the cloud console removes
    the individual cloud console policies and consolidates them into one Adds a general
    gcloud command line policy
  * Standardize logging for workloadmanager package.
  * Multipart XML API Uploads for Backint.
  * Add database system SID to database properties.
  * Fix NW HA node identification for RedHat deployments.
  * Add workload properties to discovery object returned by discoverSAPSystems
  * Add ASCS instance number to application data
  * Add Workload Manager validation rule for checking OS settings.
  * Enable WLM metric collection by default, disable submission of data to Cloud Monitoring.
  * Decoupling primary executable command and providing an alternative to lsof
  * Added HANA version in support bundle collection
  * Add WorkloadProperties to merged system details and to WLM Insights
  * Replace the link placeholder with the actual link
  * Add instance number to SAP discovery data
  * Tranche 12: HRE Rules
  * Minor typo fix in workloadmanager's hana metrics module
  * Add pacemaker metrics with SID labels to process metrics
  * updating the regex for backup and backint files to take care of log rotation in support bundle
  * Add support for disk snapshot labels for easy lifecycle management of snapshots
  * Added new OTE for changedisktype workflow
  * Add WorkloadProperties to SapSystemDetails for apps_discovery
  * Testing the timeseries in unit tests instead of just checking the count
  * Record Netweaver kernel version.
  * Tranche 12: HRE Rules
  * Testing the timeseries in unit tests instead of just checking the count
  * Testing the timeseries in unit tests instead of just checking the count
  * Relocating pacemaker collection related packages to internal/pacemaker
    for common use between process metrics and WLM
  * Use results from latest round of discovery for the collection of process metrics.
  * Handling zero rows returned case better in HANA insights
  * Adding docstrings to workloadmanager package
  * Adding docstring to configure OTE
  * adding docstrings to methods in support bundle
  * Add X4 specific configurations to configureinstance OTE.
  * Add helper functions to configureinstance OTE.
  * Display updates for HANA Insights WLM rules rollout.
  * configureinstance OTE
  * We expect the command to return a non-zero exit code and we should not be
    returning an error. Execute treats non-zero exit code as error.
  * Removing the sap control process command line params
  * Revert "Fixing system replication status code being returned"
  * configureinstance OTE
  * We expect the command to return a non-zero exit code and we should not be
    returning an error. Execute treats non-zero exit code as error.
  * Removing the sap control process command line params
  * Fixing system replication status code being returned
  * Wait for hdbindex server to stop after HANA is stopped
  * Log error to console in cases where LVM is not being used
  * Adding JournalCTL logs to support bunddle
  * hanadiskbckup - Add missing params to the Usage string
  * Move usagemetrics package into shared folder
  * Fixed data race error in TestCollectAndSendSlowMovingMetrics()
  * Disk backup/restore - Enable send-metrics-to-monitoring by default</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1717156800">- Update to version 3.3 (bsc#1225166, bsc#1225558)
  * Build updated to use -mod=vendor during build
  * Updated go.mod and go.sum with dependencies for safetext,
    using go mod vendor for github action
  * Add actual values and comments to usagemetrics.go to ensure that
    error and action codes are only appended to the end of the list.
  * Remove usage metrics from configureinstance.go
  * Add a hard Disable for reliability metrics collection
    until the namespace is created and tested.
  * Adding metrics for time taken by each query
  * Add SHA224 of labels as a new label.
  * Remove collect_reliability_metrics from configuration.json
  * Small tweaks to backint log and inquire path generation
  * Fix for unmarshalling backint configuration.
  * Implementation of instant snapshot group backup workflow
  * Backint changes around shorten_folder_path
  * Rename max_diagnose_size_gb to diagnose_file_max_size_gb
  * Adding start and finish logs in performance diagnostics
  * Validate that all disks mapped to /hana/data belong to the same consistency group.
  * Rename backint monitoring metrics parameter
  * Trim folder prefix for Backint INQUIRE output.
  * Add the ability to test the database connection
  * Reduce log level of some storage messages to debug.
  * Finalize guest action request and response format.
  * Backint dashboard fix logs
  * Add scorecards to backint dashboard
  * Making proto changes for HANA Monitoring support
    for multiple tennats and ha setup
  * Add total upload/download time to log.
  * Add HANA indexserver.ini metrics to WLM metric collection.
  * Add Netweaver role metrics as part of process metrics
  * Rotate old support bundles.
  * Update the default value of confirm-data-snapshot-after-create
    to false. and add to usage()
  * Add option to confirm HANA snapshot as successful before disk snapshot is uploaded.
  * Change log level from warn to info for non-critical messages.
  * Add diagnose_folder parameter to Backint
  * Add a 1 GB buffer to needed bytes for diagnostic
  * Add labels to group snapshot backup.
  * Enable the show status and restart agent functions for Windows.
  * Add WLM metric collection for num_completion_queues and num_submit_queues.
  * Collect support bundle on Backint errors.
  * Adding usage metrics to performance diagnostics
  * Collect agent-only support bundle on failure of backint and hanadiskbackup.
  * Minor Backint improvements
  * Add ability collect only agent logs using agent-logs-only flag to supportbundle
  * Bump version to 3.3
  * Add Backint metrics dashboard
  * DO NOT remove log files on uninstall
  * Adding more unit tests
  * Changing location of zipped file to within the
    final folder identified by unique timestamp.
  * Minor refactorings and improvements with increasing code coverage
  * Make sure DB instance number is recorded in System data.
  * Change configuration.json to 0664 to ensure world cannot write.
  * Add Netweaver Java discovery to SAP Agent.
  * Add a new version of functions to read cloud properties from metadata server.
  * Updating generated protos to proc-gen-go v1.34.1
  * Updating runConfigureInstance method and adding unit tests
    for covering configure instance ote invocation
  * Zip the final bundle and add upload functionality
  * Record database SID alongside tenant DB SIDs
  * Reduce log severity in discovery
  * Add HANA version to product version data
  * Fix race condition in tests
  * Read disk mapping from instance info if source disk
    is not provided to hanadiskbackup
  * Add option to shorten the folder path in the bucket.
  * Add SSL support for cmdline-based querying and some bugfixes
  * Move recovery package to shared directory.
  * Update protoc-gen-go version to v1.34.0 in multiple protos
  * Adding FIO commands to performance diagnostics
  * Remove error logs when errors are being returned
  * Adding perfdiag to performance diagnostics
  * Add AppInstance data to discovery data uploads.
  * Introduce protos for guestactions messages and responses.
    Support multiple commands per message.
  * Update wording for HANA Insights rules.
  * Configureinstance updates.
  * Adding a check for retention policy before performing backup operation.
  * Remove the unused loglevel flag from logusage OTE
  * Change the language around the default parameters being
    optimized for performance in backint
  * Add instance role to SAP System properties
  * Increase wait time for index server to stop.
  * Integrating backint OTE into performancediagnostics
  * Update wording around configureinstance unsupported machine type.
  * Pass the right disk name to check if disk is attached
  * Integrating new DB Handle and hdbuserstore key support
    with remaining HANA DB dependant workflows
  * Refactor HANA and filesystems specific code to a common hanabackup package
  * Bumps x/net dependency to v0.23
  * Append HANA Insights rule to WLM fake metrics file in script to generate WLM rule.
  * Integrating configure instance ote in performance diagnostics
  * Update disk backup OTE to parse paths even with /dev/mapper
    in the middle of path, not necessarily as a prefix
  * Adding a few missing labels to wlm-fake-metrics.yaml
  * Changing loglevel for onetime.Init() calls
  * Refactor change - Move PD related functions to gce.go
  * Fix agentcommunication import replace statements
  * Update replace functions for new open source dependencies.
  * Set up scaffolding for guest actions handling in SAP Agent along with UAP library code
  * Backint upload/download metrics sent to cloud monitoring.
  * Cleaning up the performance diagntics file wth recent changes
  * Fixes to usage strings in OTEs for optional params
  * Integrating new database connector with HANA Monitoring
    and adding support for HDBUserstore Key
  * Implement hdbsql commandline result parsing
  * SAP Discovery - Add SAP Instance Numbers to instance properties
  * Updating OTEs to include params for when OTE is invoked internally
  * Modifying flags to follow design changes
  * Create fake WLM metric overrides for testing
  * Implement constructors and query functions for querying
    HANA DB via hdbuserstore using cmdline
  * Skeleton for querying HANA DB via hdbuserstore using cmdline
  * Parameterize Backint Diagnose max file size.
  * Metadata parameter added to Backint.
  * Adding initial layout for performance diagnostics OTE
  * Create a new API CreateClient() in shared logging which
    returns an error in case of failures
  * Backint no longer writes ERROR if temporary chunk failed to delete.
  * Create onetime.Init() to condense reused code.
  * Fixing a typo in a process metrics retry logic comment
  * Rename workload_validation param with workload_evaluation in configure OTE
  * Send agent version in Write Insight requests
  * Ensuring /sap/cluster/resources covers all the nodes.</changelog>
</package>
<package pkgid="95199555e5d70529cefd3139e19efb70a9448ebf04b60b9f4dbde90bd0fc4cd3" name="google-cloud-sap-agent" arch="src">
  <version epoch="0" ver="3.3" rel="150100.3.32.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464, bsc#1210465)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689163200">- Update to version 2.0 (bsc#1211516, bsc#1211517)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689768000">- Update to version 2.1 (bsc#1213397)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1692273600">- Install missing default configuration file (bsc#1214293)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 2.5
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697803200">- Update to version 2.6 (bsc#1215672, bsc#1215673)
  * Rolling back previous change for storing Project Number,
    Project ID is sufficient, no need to add complexity
  * Determine location of HANA global.ini using SAP system discovery logic
  * Add numeric project ID prefix to object name for ReadMetrics
  * Discovery now looks up and stores project number with discovery data
  * ReadMetrics updates for IAM permissions and bucket object names
  * fixing the bug in backoff logic, using separate policies
    for each collector and adding some logs
  * Backint migration from the old agent and supporting legacy parameters
  * adding new backoff policies for process metrics and fixing the
    bug in process metrics sapservice collector
  * Bump SAP Agent version to 2.6
  * Fix an issue where HANA hosts may not be discovered
    properly if hostname differs from instance name
  * Use Go 1.20 friendly sorting solution
  * adding retries in process metrics logic with backoffs
  * Fix parsing of instance (host/VM) name in Pacemaker pcmk_delay_max metric
  * Add the collection definition changes for the SAP HANA Topology metrics
  * Template for Cloud Monitoring Alerts for Backint errors
  * adding backoff to InstanceProperties to each collector
  * Reduced the number of parameters of startXX functions
    by consolidating them into respective structs
  * completing TODO (b/298315981): Create a map from skipped
    list metrics and pass it to collectors.
  * Proto package name changes to reflect the current path
  * Use instance_name instead of instance_id for baremetal systems
  * Decode encryption keys for Backint.
  * Moving hareplication metric to fast moving metrics
  * Added backoffs package in process metrics to keep the backoff policies
    and retry policies separately and make it reusable acrosss process metrics
  * Install Backint OTE
  * Adding skip list logic to process metrics
  * Separating fastmoving metrics into a separate file from other process metrics
  * Update remote collection to use collected instance's Cloud Properties
  * ReadMetrics upload to bucket and send status to monitoring
  * Remove local implementation of DW API in favor of using generated third_party version
  * ReadMetrics read input file and write results to local filesystem
  * Clean up command line executions to collect SAP Control metrics
  * Adding new OTE structure for ReadMetrics
  * Add the SUSE specific spec file to keep upstream changes and SUSE packaging in sync
  * Collect and report upcoming maintenance
  * Add basepath override and gcealpha functionality
  * Making proto changes for process metrics re-arch
  * Changes for generating HANA Insights locally into a markdown file
  * Delay feature specific daily action logs by 24 hours
    to avoid noise created by startup failures
  * Update to the rule "maximum_invalid_connect_attempts"
  * Add some missing related resources
  * Fix rate limiting for compression enabled uploads/downloads
  * Optional User-Agent parameter added to storage package client connection
  * Relocate gcealpha to /internal
  * Fix parse_test error
  * Retries added for opening files in Backint
  * Make processmetrics unit tests hermetic
  * Remove if-this-then-that requirement from WLM validation rule
  * Fix WriteInsight JSON encoding, and add missing elements
  * Add configuration value to change API endpoint for Data Warehouse calls
  * Storage package progress messages based off of read/writes directly to the bucket
  * Make Collect DB Metrics as NO-OP when metrics are being read from override file
  * Remove unused field from backint proto
  * Custom retries for the storage package with exponential backoff and MaxRetries setting</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1701172800">- Update to version 2.8 (bsc#1217373, bsc#1217374)
  * Bump agent version to 2.8 to support C3/M3 certification
  * Update go.yml to use go 1.21
  * Switch from "slices" to "go_exp.../slices" for go version dependency
  * Use newly refactored discovery packages.
  * Fixes issue with diskname from source or device name
  * Adds extreme disk type IOps and Throughput for host metrics
  * Add `INTEGRATION` target config environment for collection definition testing
  * Add project number to SAP System proto
  * Add a cache to discovered resources. This reduces the number of API
    calls needed to perform System Discovery
  * Replace windows wmic hardware queries with PowerShell wmi queries
  * Fix test flakiness
  * Improve development process for collection definition configuration
  * HANA PD based snapshot and restore - changes to add wait for uploading
  * Fix for kokoro build issue in processmetrics/networkstats
  * GCBDR SAPCoreAPP Package in Agent for SAP
  * Add version tracking for WLM validation config
  * Send workload validation config to remote instances for use during remote collection
  * Add flag for passing in workload validation config into remote collection OTE
  * Bump google.golang.org/grpc from 1.58.2 to 1.58.3
- from version 2.7
  * Added ote for hma dashboards migration
  * Increase Max backoff in storage package to 300 seconds
  * Added subpaths for collection of required TCP metrics
  * Add more debug logs and increase the wait-time for PD operations in restore
  * No public description
  * Add 30 second timeout to read/write from the local file system for Backint
  * No public description
  * Adds RHEL 9 VM Manager policy
  * Extract cloud-related discovery functions into separate file
  * Adding timeout to systemReplication.py command execution
  * Allow download attempts without verifying connection to bucket
  * Invoke `collectiondefinition.Start` when starting the agent in daemon mode
  * SAP Agent CLI - usability improvements for flags and help menu
  * Add host project information to HANA DB component discovery data.
  * Use proto names for default configuration during Backint installation
  * Extending logging capabilities to all packages of the agent
  * Added a feature for exposing TCP connection metrics
  * Migrating context logging logic to all packages of SAP Agent
  * Add an ifthisthenthatlint to ensure new script is kept in sync with rule proto
  * (collectiondefition) - Discard unknown fields and remove breaking metrics
  * Moving commandlineexecutor from internal to shared for sqlserveragent
  * Define startup function for collectiondefinition package
  * Check error on close of destFile in backint restore
  * Allow trailing zeros for millisecond timestamps in Backint
  * Add pid to all agent logs
  * Bump SAP Agent version to 2.7 (placeholder release version)
  * Separate collection definition validation functionality into a separate file
  * Add datetime to migration folder for Backint installation
  * Add symlink for Backint log file to install directory
  * Set a deadline for the final flush to cloud logging
  * Increase chunk retry deadline in storage package
  * Fix order dependent tests in sapagent/internal/storage
  * Change support bundle feature to collect the OTE logs from new path
  * Usage logging for remote WLM validation metrics collection from the collector instance
  * Extract discovery functions performed on the host to a separate file
  * Improve agent shutdown experience in daemon mode
  * Fix Backint restoring incorrect file
  * Google Events - rule proto initial submission
  * Move gce package to shared folder for use by SQL Server agent
  * Add GCS integration into collectiondefinition package
  * Standardize import aliases
  * go mod updates
  * Fixing go/gotsan data race error in processmetrics_test
  * Add Backint support for Inquire line: `#EBID &lt;external_backup_id&gt;`
  * Chown Backint install directories to user/group of the opt/ folder
  * Create OTE logs under a subdir under /var/log as /var/log is only writable by root
  * Will not create an empty log file for logusage logs and one
    time execution logs will have 0666 file mode
  * Setting the log file created to world read+write permission
  * Bump golang.org/x/net from 0.15.0 to 0.17.0
  * Add recovery_bucket parameter to Backint
  * Extract SAP related discovery functions to a separate file
  * Fix Backint install directory
  * Fix Backint parallel uploads
  * Move maintenance collector to beta API
  * Pruning batches to prevent time series duplication
  * Added a logger for incorporating service context keys in logs
  * Encode the DB password string to handle passwords with special characters
  * Handling non error scenarios better in netweaver.go
  * Internal change
  * fixes typo on backint install
  * Allow all users to execute google_cloud_sap_agent
  * Fix hdbbackint script.
  * Subdirs for Backint DIAGNOSE temporary files
  * Report zero-value metrics for upcoming maintenance
  * Clean up gcealpha functionality
  * Fix default configuration values in daemon and backint
  * Update the comment in proto to reflect that the metric
    path in skip list should start with /sap
  * Implemented separation of context of different services</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706184000">- Update to version 3.0 (bsc#1218736, bsc#1218737)
  * Suppress packemaker command error to debug to avoid log flooding
  * Expand load balancing cluster discovery.
  * Log success messages in OTEs to STDOUT instead of STDERR used by log.Print
  * Use bash always to avoid variation of behavior across OS/Shell types
  * Minor updates to installbackint.
  * Backint compose step properly saves metadata.
  * Fix issue with discovery on ASCS instances.
  * hanadiskrestore - fix the format of disktype string for disk create API
  * Fix issue with PCS cluster address discovery.
  * Update transform to insight
  * Rename HANA backup/restore OTEs to reflect they are supported
    for all disks and not just persistent disk
  * Increase the timeout for HDB stop to account for busy DBs
  * Adding project sap-ecs-testing to the list.
  * PD Restore - Support provisioned-iops and provisioned-throughput
  * Integration test for configure OTE
  * Added precondition in hana pd backup for stripped LVM
  * Add a precondition check to verify user has passed a valid
    snapshot name that is present in the current project
  * Update the usage to reflect additional required param
  * Minor path update for supportbundle OTE.
  * Fixing bug in slow moving metrics partial collection scenarios
  * Adding check for agent status after restart.
  * Ensure Backint ComposeChunks has a valid bucket handle
  * Discover whether a Netweaver instance is ABAP or Java
  * Replace standard slices package with third party version
  * WLM HANA metric `ha_in_same_zone` now reports instance
    names for HA nodes in the same zone
  * Fix data race condition for Backint Backup with new client connections
  * Make -new-disk-name a required parameter to avoid the 63 char
    limit in the name length due to auto-generated names
  * Fix command for collecting Corosync metric `two_node_runtime`
  * Make snapshot name similar to disk name
  * Bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * Enable Discovery config flag controls submission
    to Data Warehouse and Cloud Logging
  * Create new clients for each operation in Backint
  * Add `client_endpoint` to Backint proto.
  * Getting the build number into the version for display
  * Backint config name change: service_account to service_account_key
  * Add HANA HA metrics to collection definition.
  * Fix sorting bug in a diff in apps_discovery_test.go
  * Add discoverHANATenantDBs to main code path
  * Change PIPE filemode to WRONLY to allow us to detect broken pipes
  * Deprecate `sap_system_discovery` config field in favor of `enable_discovery`
  * Move the validation of whether user passed correct PD, before stopping HANA
  * Add a placeholder for public doc link with next steps
    after hanapdrestore workflow has completed
  * Fix executable path for HDB version command
  * Add optional param `new-disk-name` to hanapdrestore
    for users that wish to override the default
  * Sort the skipmetrics in unit test to avoid order related flakes
  * Generalizing configure OTE
  * Discover Netweaver kernel version
  * Fix Sprintf call
  * Use SAP System data to determine if HANA HA nodes share the same zone.
  * hanapdrestore - do not delete PDs in case of failures
  * Create discoverHANATenantDBs method to support multiple SIDs for HANA tenant DBs
  * Send additional fields in Data Warehouse WriteInsightRequest
  * Updating the username parameters for hana pd backup and restore
  * Retrieve Reliability data every 2 hours instead of 24
  * Discover HANA version
  * Fix import for GitHub build
  * Add instance properties, and topology information to system data
  * Keep the device nam and disk name same after restore
  * Move sapdiscovery package into system package
  * Changer the default name of the disk created by restore workflow
  * Updates the generated protobuf go for system.proto
  * Update generated system proto
  * Update go.yml
  * Add topology and instance properties info to SAP System data
  * Add a check to verify the disk is attached to instance, fail if disk is not attached
  * Add application and database software properties to system representation
  * Fix race condition in heartbeat test case
  * Add error handling to restore workflow to try and keep
    the HANA system in a clean state on failures
  * Enable LogToCloud by default for both OTE and Daemon modes
  * Bump Agent version to 3.0
  * Reliability OTE added to SAP Agent
  * Declare public Get interface for SAP System discovery data
  * Integration testing for Networkstats Package
  * Adding project sap-ecs-testing to the list
  * Adding one time execution for enabling/disabling of features
  * Change to using custom retries for initial bucket connection
  * Default collection definition to be fetched from GCS
  * Add a 2 minute context timeout for initial bucket connection
  * Add `collection_config_version` as a WLM system metric
  * Make project, host param optional for hanapdbackup,
    in addition make user param optional for hanapdrestore
  * Fix potential nil dereference WLM metrics collection
  * Add force-stop-hana to restore workflow to forcefully stop
    HANA when the param is passed
  * Rename the HANA PD snapshot and restore workflows
  * Add unit tests for GetProvisionIOps and GetProvisionedThoughput
  * Remove the TestCollect unit test which relies on nc
    command which can be flaky in unit tests
  * Increase Backint timeout for PIPE files to 3 minutes
  * Add XFS freeze and unfreeze to PD based snapshot</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708430400">- Update to version 3.1 (bsc#1220010, bsc#1220111)
  * Fixing system replication status code being returned
  * Reduce disk snapshot wait durations
  * Fix test flakes in workloadcollector test.
  * adding metrics for db freeze time and total workflow time
  * Fix for SAP System discovery adding the current host to all components.
  * Restore default WLM metric collection settings.
  * change description of validate OTE
  * fix a typo in the command name and add a delay before we try the unmount
  * Use underscore as separator for flags in place of hyphens
  * Enable host_metrics and disable reliability_metrics by default in configure OTE
  * Collect reliability metrics in the free namespace
  * Remove user from cmd params for HANA Replication
  * Enable workload manager metric collection by default.
  * Add support configuration flag to enable legacy WLM metric data submission workflow.
  * Lowers the log level of discovery to info
  * Fix for HANA Replication Config
  * Add additional instance-id parameter for users who do not want to provide port number
  * Use _ instead of - for parameters in configurebackint
  * Implementing panic recovery to HANA Monitoring: CreateWorkerPool
  * Fix issue with process metrics subroutine starting.
  * Add a flag to enable or disable workload discovery.
  * Reduce logs in sapdiscovery to debug, these are now run a
    lot more frequently and are flooding the logs
  * Use bucket `cloudsapdeploystaging` for staging environment.
  * Updates default value handling for system discovery flag.
  * Added default values to some frequency flags in configure OTE
  * force a sync before unmounting to clear out stale file handles
  * Retain recoverable routine in process metrics.
  * Ensures slow metrics workers stop on context cancellation.
  * Log lsof output if unmount fails during restore
  * SAP Discovery - Discover R3trans data
  * Add panic recovery to collectiondefinition update routine
  * configurebackint OTE.
  * Adding panic recovery to remote.go
  * Prevent host metrics from restarting the daily metrics report if it has already been started.
  * Add panic recovery to agent metrics
  * Implementing panic recovery for hana monitoring: logging action daily
  * Routines now use their own context and cancel in the event of a panic recovery.
  * Add panic recovery to host metrics routines
  * Removed -path flag and fixed usage string
  * Add workload properties to the SAP System definition.
  * Add panic recovery to collectMetricsFromConfig routines.
  * Add panic recovery to fast metric collection routine.
  * Reduces the log severity to debug for the exponential backoff policy
  * Add panic recovery to heartbeat routine.
  * Updating configuration.json file to remove deprecated sap_discovery field
  * Use protojson instead of custom function for snake_case marshaling
  * Add panic recovery to WLM metrics collection
  * HANA Insights rules tranche 11: Create unit tests and add to auto push
  * Add panic recovery to workload collector daily usage metrics.
  * Processmetrics - suppress Error and Warn logs that really need to be debug
  * Formatting the output of messages printed by configure OTE
  * Changing flag names of configure OTE to align better with configuration.json fields
  * Add automatic panic recovery to slow metrics collection
  * Add panic recovery to goroutine collectAndSend
  * Add panic recovery to goroutine
  * Retain recoverable routines beyond function scope.
  * Implement recovery handler for SAP System discovery package
  * Tranche 11: HRE Rules
  * Update github build
  * Adds generic panic recovery to SAP System discovery package
  * Initialize the sidadm env to ensure restore can be run as root user
  * not pacaking gcbdr scripts till launch of the feature
  * Change datatype of frequency flags from string to int
  * Breaking down --frequency flag into separate flags for different features for better isolation
  * Fix configuration.json file from being written in camelCase to snake_case
  * Tranche 6,7,8,9,10: HRE Rules
  * Suppress pacemaker related log from Error to Debug
  * creating the OTE for GCBDR discovery
  * Update HA node identification
  * Tranche 10: HRE Rules
  * Update file permissions and ownership for installbackint when running as root.
  * Adding newline after version print.
  * Exposing HANA Logical volumes availability metrics
  * Make workloadmanager parameters test more robust.
  * Fix panic in cloud discovery
  * Tranche 10: HRE Rules
  * Add recovery_folder_prefix parameter to Backint.
  * Mark process_metrics_send_frequency as deprecated
  * Add snapshot-type param to hanadiskbackup with default as STANDARD
    type. Users can override to ARCHIVE type if needed.
  * Add new folder_prefix parameter to Backint.
  * Add HANA new HANA insight rules to BUILD file and embed sources
  * Tranche 10a: HRE Rules
  * Tranche 6b: HRE Rules
  * Tranche 8b: HRE Rules
  * Fix for sending isABAP value
  * Updating logusage command line flags</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Update to version 3.2 (bsc#1222215, bsc#1222216)
  * Remove internal gensupport package.
  * Restore additional error handling and response checking to internal data warehouse client.
  * Updating the aggregate function in HANA insight rules
  * Remove a leftover debug log
  * Allow multipart uploads for PIPE file types.
  * Update go-hdb version to v1.8.0
  * Perform log restores in serial rather than parallel.
  * Add sample usage examples to commandlineexecutor
  * Small update to configureinstance OTE
  * Add nil check in backup and restore flows to protect against panics.
  * Close http response body in WriteInsight() and soap.go
  * Record topology type.
  * Initialize usagemetrics for OTEs
  * Add Instance Number to SAP System instance properties
  * Set `min_version` for WLM `os_settings` system metric.
  * Increase timeout for saptune re-apply commands.
  * Adding handling for encrypted snapshots in backup and restore
  * Change the version check comparisons to account for versions
    older than those listed in SAP Note.
  * Skip the Netweaver metrics that need dpmon on NW kernels
    affected by SAP Note: 3366597
  * Fix imports
  * No public description
  * Use internal data warehouse client.
  * Fix disp+work command invocation for Netweaver Kernel version discovery.
  * Add note about default parameter values to installbackint.
  * Add mutex in multipart writer for potential data races.
  * Update go.mod and go.sum
  * Skip XFS freeze by default unless user passes a parameter to do it explicitly
  * configureinstance minor updates.
  * Add safety check for usage metrics on BMS
  * Storage Class parameter added to Backint.
  * Update configureinstance's X4 saptune conf.
  * XML Multipart Write() and Close() methods completed.
  * Fixes the vmmanager policies for sles12 and sles15 used in the cloud console removes
    the individual cloud console policies and consolidates them into one Adds a general
    gcloud command line policy
  * Standardize logging for workloadmanager package.
  * Multipart XML API Uploads for Backint.
  * Add database system SID to database properties.
  * Fix NW HA node identification for RedHat deployments.
  * Add workload properties to discovery object returned by discoverSAPSystems
  * Add ASCS instance number to application data
  * Add Workload Manager validation rule for checking OS settings.
  * Enable WLM metric collection by default, disable submission of data to Cloud Monitoring.
  * Decoupling primary executable command and providing an alternative to lsof
  * Added HANA version in support bundle collection
  * Add WorkloadProperties to merged system details and to WLM Insights
  * Replace the link placeholder with the actual link
  * Add instance number to SAP discovery data
  * Tranche 12: HRE Rules
  * Minor typo fix in workloadmanager's hana metrics module
  * Add pacemaker metrics with SID labels to process metrics
  * updating the regex for backup and backint files to take care of log rotation in support bundle
  * Add support for disk snapshot labels for easy lifecycle management of snapshots
  * Added new OTE for changedisktype workflow
  * Add WorkloadProperties to SapSystemDetails for apps_discovery
  * Testing the timeseries in unit tests instead of just checking the count
  * Record Netweaver kernel version.
  * Tranche 12: HRE Rules
  * Testing the timeseries in unit tests instead of just checking the count
  * Testing the timeseries in unit tests instead of just checking the count
  * Relocating pacemaker collection related packages to internal/pacemaker
    for common use between process metrics and WLM
  * Use results from latest round of discovery for the collection of process metrics.
  * Handling zero rows returned case better in HANA insights
  * Adding docstrings to workloadmanager package
  * Adding docstring to configure OTE
  * adding docstrings to methods in support bundle
  * Add X4 specific configurations to configureinstance OTE.
  * Add helper functions to configureinstance OTE.
  * Display updates for HANA Insights WLM rules rollout.
  * configureinstance OTE
  * We expect the command to return a non-zero exit code and we should not be
    returning an error. Execute treats non-zero exit code as error.
  * Removing the sap control process command line params
  * Revert "Fixing system replication status code being returned"
  * configureinstance OTE
  * We expect the command to return a non-zero exit code and we should not be
    returning an error. Execute treats non-zero exit code as error.
  * Removing the sap control process command line params
  * Fixing system replication status code being returned
  * Wait for hdbindex server to stop after HANA is stopped
  * Log error to console in cases where LVM is not being used
  * Adding JournalCTL logs to support bunddle
  * hanadiskbckup - Add missing params to the Usage string
  * Move usagemetrics package into shared folder
  * Fixed data race error in TestCollectAndSendSlowMovingMetrics()
  * Disk backup/restore - Enable send-metrics-to-monitoring by default</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1717156800">- Update to version 3.3 (bsc#1225166, bsc#1225558)
  * Build updated to use -mod=vendor during build
  * Updated go.mod and go.sum with dependencies for safetext,
    using go mod vendor for github action
  * Add actual values and comments to usagemetrics.go to ensure that
    error and action codes are only appended to the end of the list.
  * Remove usage metrics from configureinstance.go
  * Add a hard Disable for reliability metrics collection
    until the namespace is created and tested.
  * Adding metrics for time taken by each query
  * Add SHA224 of labels as a new label.
  * Remove collect_reliability_metrics from configuration.json
  * Small tweaks to backint log and inquire path generation
  * Fix for unmarshalling backint configuration.
  * Implementation of instant snapshot group backup workflow
  * Backint changes around shorten_folder_path
  * Rename max_diagnose_size_gb to diagnose_file_max_size_gb
  * Adding start and finish logs in performance diagnostics
  * Validate that all disks mapped to /hana/data belong to the same consistency group.
  * Rename backint monitoring metrics parameter
  * Trim folder prefix for Backint INQUIRE output.
  * Add the ability to test the database connection
  * Reduce log level of some storage messages to debug.
  * Finalize guest action request and response format.
  * Backint dashboard fix logs
  * Add scorecards to backint dashboard
  * Making proto changes for HANA Monitoring support
    for multiple tennats and ha setup
  * Add total upload/download time to log.
  * Add HANA indexserver.ini metrics to WLM metric collection.
  * Add Netweaver role metrics as part of process metrics
  * Rotate old support bundles.
  * Update the default value of confirm-data-snapshot-after-create
    to false. and add to usage()
  * Add option to confirm HANA snapshot as successful before disk snapshot is uploaded.
  * Change log level from warn to info for non-critical messages.
  * Add diagnose_folder parameter to Backint
  * Add a 1 GB buffer to needed bytes for diagnostic
  * Add labels to group snapshot backup.
  * Enable the show status and restart agent functions for Windows.
  * Add WLM metric collection for num_completion_queues and num_submit_queues.
  * Collect support bundle on Backint errors.
  * Adding usage metrics to performance diagnostics
  * Collect agent-only support bundle on failure of backint and hanadiskbackup.
  * Minor Backint improvements
  * Add ability collect only agent logs using agent-logs-only flag to supportbundle
  * Bump version to 3.3
  * Add Backint metrics dashboard
  * DO NOT remove log files on uninstall
  * Adding more unit tests
  * Changing location of zipped file to within the
    final folder identified by unique timestamp.
  * Minor refactorings and improvements with increasing code coverage
  * Make sure DB instance number is recorded in System data.
  * Change configuration.json to 0664 to ensure world cannot write.
  * Add Netweaver Java discovery to SAP Agent.
  * Add a new version of functions to read cloud properties from metadata server.
  * Updating generated protos to proc-gen-go v1.34.1
  * Updating runConfigureInstance method and adding unit tests
    for covering configure instance ote invocation
  * Zip the final bundle and add upload functionality
  * Record database SID alongside tenant DB SIDs
  * Reduce log severity in discovery
  * Add HANA version to product version data
  * Fix race condition in tests
  * Read disk mapping from instance info if source disk
    is not provided to hanadiskbackup
  * Add option to shorten the folder path in the bucket.
  * Add SSL support for cmdline-based querying and some bugfixes
  * Move recovery package to shared directory.
  * Update protoc-gen-go version to v1.34.0 in multiple protos
  * Adding FIO commands to performance diagnostics
  * Remove error logs when errors are being returned
  * Adding perfdiag to performance diagnostics
  * Add AppInstance data to discovery data uploads.
  * Introduce protos for guestactions messages and responses.
    Support multiple commands per message.
  * Update wording for HANA Insights rules.
  * Configureinstance updates.
  * Adding a check for retention policy before performing backup operation.
  * Remove the unused loglevel flag from logusage OTE
  * Change the language around the default parameters being
    optimized for performance in backint
  * Add instance role to SAP System properties
  * Increase wait time for index server to stop.
  * Integrating backint OTE into performancediagnostics
  * Update wording around configureinstance unsupported machine type.
  * Pass the right disk name to check if disk is attached
  * Integrating new DB Handle and hdbuserstore key support
    with remaining HANA DB dependant workflows
  * Refactor HANA and filesystems specific code to a common hanabackup package
  * Bumps x/net dependency to v0.23
  * Append HANA Insights rule to WLM fake metrics file in script to generate WLM rule.
  * Integrating configure instance ote in performance diagnostics
  * Update disk backup OTE to parse paths even with /dev/mapper
    in the middle of path, not necessarily as a prefix
  * Adding a few missing labels to wlm-fake-metrics.yaml
  * Changing loglevel for onetime.Init() calls
  * Refactor change - Move PD related functions to gce.go
  * Fix agentcommunication import replace statements
  * Update replace functions for new open source dependencies.
  * Set up scaffolding for guest actions handling in SAP Agent along with UAP library code
  * Backint upload/download metrics sent to cloud monitoring.
  * Cleaning up the performance diagntics file wth recent changes
  * Fixes to usage strings in OTEs for optional params
  * Integrating new database connector with HANA Monitoring
    and adding support for HDBUserstore Key
  * Implement hdbsql commandline result parsing
  * SAP Discovery - Add SAP Instance Numbers to instance properties
  * Updating OTEs to include params for when OTE is invoked internally
  * Modifying flags to follow design changes
  * Create fake WLM metric overrides for testing
  * Implement constructors and query functions for querying
    HANA DB via hdbuserstore using cmdline
  * Skeleton for querying HANA DB via hdbuserstore using cmdline
  * Parameterize Backint Diagnose max file size.
  * Metadata parameter added to Backint.
  * Adding initial layout for performance diagnostics OTE
  * Create a new API CreateClient() in shared logging which
    returns an error in case of failures
  * Backint no longer writes ERROR if temporary chunk failed to delete.
  * Create onetime.Init() to condense reused code.
  * Fixing a typo in a process metrics retry logic comment
  * Rename workload_validation param with workload_evaluation in configure OTE
  * Send agent version in Write Insight requests
  * Ensuring /sap/cluster/resources covers all the nodes.</changelog>
</package>
<package pkgid="f4bfd7c135fb3a02e2d5807cdd2a65a8b894578b761d6ea9d3bbf8a166d2165d" name="google-cloud-sap-agent" arch="x86_64">
  <version epoch="0" ver="3.3" rel="150100.3.32.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464, bsc#1210465)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689163200">- Update to version 2.0 (bsc#1211516, bsc#1211517)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689768000">- Update to version 2.1 (bsc#1213397)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1692273600">- Install missing default configuration file (bsc#1214293)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 2.5
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697803200">- Update to version 2.6 (bsc#1215672, bsc#1215673)
  * Rolling back previous change for storing Project Number,
    Project ID is sufficient, no need to add complexity
  * Determine location of HANA global.ini using SAP system discovery logic
  * Add numeric project ID prefix to object name for ReadMetrics
  * Discovery now looks up and stores project number with discovery data
  * ReadMetrics updates for IAM permissions and bucket object names
  * fixing the bug in backoff logic, using separate policies
    for each collector and adding some logs
  * Backint migration from the old agent and supporting legacy parameters
  * adding new backoff policies for process metrics and fixing the
    bug in process metrics sapservice collector
  * Bump SAP Agent version to 2.6
  * Fix an issue where HANA hosts may not be discovered
    properly if hostname differs from instance name
  * Use Go 1.20 friendly sorting solution
  * adding retries in process metrics logic with backoffs
  * Fix parsing of instance (host/VM) name in Pacemaker pcmk_delay_max metric
  * Add the collection definition changes for the SAP HANA Topology metrics
  * Template for Cloud Monitoring Alerts for Backint errors
  * adding backoff to InstanceProperties to each collector
  * Reduced the number of parameters of startXX functions
    by consolidating them into respective structs
  * completing TODO (b/298315981): Create a map from skipped
    list metrics and pass it to collectors.
  * Proto package name changes to reflect the current path
  * Use instance_name instead of instance_id for baremetal systems
  * Decode encryption keys for Backint.
  * Moving hareplication metric to fast moving metrics
  * Added backoffs package in process metrics to keep the backoff policies
    and retry policies separately and make it reusable acrosss process metrics
  * Install Backint OTE
  * Adding skip list logic to process metrics
  * Separating fastmoving metrics into a separate file from other process metrics
  * Update remote collection to use collected instance's Cloud Properties
  * ReadMetrics upload to bucket and send status to monitoring
  * Remove local implementation of DW API in favor of using generated third_party version
  * ReadMetrics read input file and write results to local filesystem
  * Clean up command line executions to collect SAP Control metrics
  * Adding new OTE structure for ReadMetrics
  * Add the SUSE specific spec file to keep upstream changes and SUSE packaging in sync
  * Collect and report upcoming maintenance
  * Add basepath override and gcealpha functionality
  * Making proto changes for process metrics re-arch
  * Changes for generating HANA Insights locally into a markdown file
  * Delay feature specific daily action logs by 24 hours
    to avoid noise created by startup failures
  * Update to the rule "maximum_invalid_connect_attempts"
  * Add some missing related resources
  * Fix rate limiting for compression enabled uploads/downloads
  * Optional User-Agent parameter added to storage package client connection
  * Relocate gcealpha to /internal
  * Fix parse_test error
  * Retries added for opening files in Backint
  * Make processmetrics unit tests hermetic
  * Remove if-this-then-that requirement from WLM validation rule
  * Fix WriteInsight JSON encoding, and add missing elements
  * Add configuration value to change API endpoint for Data Warehouse calls
  * Storage package progress messages based off of read/writes directly to the bucket
  * Make Collect DB Metrics as NO-OP when metrics are being read from override file
  * Remove unused field from backint proto
  * Custom retries for the storage package with exponential backoff and MaxRetries setting</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1701172800">- Update to version 2.8 (bsc#1217373, bsc#1217374)
  * Bump agent version to 2.8 to support C3/M3 certification
  * Update go.yml to use go 1.21
  * Switch from "slices" to "go_exp.../slices" for go version dependency
  * Use newly refactored discovery packages.
  * Fixes issue with diskname from source or device name
  * Adds extreme disk type IOps and Throughput for host metrics
  * Add `INTEGRATION` target config environment for collection definition testing
  * Add project number to SAP System proto
  * Add a cache to discovered resources. This reduces the number of API
    calls needed to perform System Discovery
  * Replace windows wmic hardware queries with PowerShell wmi queries
  * Fix test flakiness
  * Improve development process for collection definition configuration
  * HANA PD based snapshot and restore - changes to add wait for uploading
  * Fix for kokoro build issue in processmetrics/networkstats
  * GCBDR SAPCoreAPP Package in Agent for SAP
  * Add version tracking for WLM validation config
  * Send workload validation config to remote instances for use during remote collection
  * Add flag for passing in workload validation config into remote collection OTE
  * Bump google.golang.org/grpc from 1.58.2 to 1.58.3
- from version 2.7
  * Added ote for hma dashboards migration
  * Increase Max backoff in storage package to 300 seconds
  * Added subpaths for collection of required TCP metrics
  * Add more debug logs and increase the wait-time for PD operations in restore
  * No public description
  * Add 30 second timeout to read/write from the local file system for Backint
  * No public description
  * Adds RHEL 9 VM Manager policy
  * Extract cloud-related discovery functions into separate file
  * Adding timeout to systemReplication.py command execution
  * Allow download attempts without verifying connection to bucket
  * Invoke `collectiondefinition.Start` when starting the agent in daemon mode
  * SAP Agent CLI - usability improvements for flags and help menu
  * Add host project information to HANA DB component discovery data.
  * Use proto names for default configuration during Backint installation
  * Extending logging capabilities to all packages of the agent
  * Added a feature for exposing TCP connection metrics
  * Migrating context logging logic to all packages of SAP Agent
  * Add an ifthisthenthatlint to ensure new script is kept in sync with rule proto
  * (collectiondefition) - Discard unknown fields and remove breaking metrics
  * Moving commandlineexecutor from internal to shared for sqlserveragent
  * Define startup function for collectiondefinition package
  * Check error on close of destFile in backint restore
  * Allow trailing zeros for millisecond timestamps in Backint
  * Add pid to all agent logs
  * Bump SAP Agent version to 2.7 (placeholder release version)
  * Separate collection definition validation functionality into a separate file
  * Add datetime to migration folder for Backint installation
  * Add symlink for Backint log file to install directory
  * Set a deadline for the final flush to cloud logging
  * Increase chunk retry deadline in storage package
  * Fix order dependent tests in sapagent/internal/storage
  * Change support bundle feature to collect the OTE logs from new path
  * Usage logging for remote WLM validation metrics collection from the collector instance
  * Extract discovery functions performed on the host to a separate file
  * Improve agent shutdown experience in daemon mode
  * Fix Backint restoring incorrect file
  * Google Events - rule proto initial submission
  * Move gce package to shared folder for use by SQL Server agent
  * Add GCS integration into collectiondefinition package
  * Standardize import aliases
  * go mod updates
  * Fixing go/gotsan data race error in processmetrics_test
  * Add Backint support for Inquire line: `#EBID &lt;external_backup_id&gt;`
  * Chown Backint install directories to user/group of the opt/ folder
  * Create OTE logs under a subdir under /var/log as /var/log is only writable by root
  * Will not create an empty log file for logusage logs and one
    time execution logs will have 0666 file mode
  * Setting the log file created to world read+write permission
  * Bump golang.org/x/net from 0.15.0 to 0.17.0
  * Add recovery_bucket parameter to Backint
  * Extract SAP related discovery functions to a separate file
  * Fix Backint install directory
  * Fix Backint parallel uploads
  * Move maintenance collector to beta API
  * Pruning batches to prevent time series duplication
  * Added a logger for incorporating service context keys in logs
  * Encode the DB password string to handle passwords with special characters
  * Handling non error scenarios better in netweaver.go
  * Internal change
  * fixes typo on backint install
  * Allow all users to execute google_cloud_sap_agent
  * Fix hdbbackint script.
  * Subdirs for Backint DIAGNOSE temporary files
  * Report zero-value metrics for upcoming maintenance
  * Clean up gcealpha functionality
  * Fix default configuration values in daemon and backint
  * Update the comment in proto to reflect that the metric
    path in skip list should start with /sap
  * Implemented separation of context of different services</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706184000">- Update to version 3.0 (bsc#1218736, bsc#1218737)
  * Suppress packemaker command error to debug to avoid log flooding
  * Expand load balancing cluster discovery.
  * Log success messages in OTEs to STDOUT instead of STDERR used by log.Print
  * Use bash always to avoid variation of behavior across OS/Shell types
  * Minor updates to installbackint.
  * Backint compose step properly saves metadata.
  * Fix issue with discovery on ASCS instances.
  * hanadiskrestore - fix the format of disktype string for disk create API
  * Fix issue with PCS cluster address discovery.
  * Update transform to insight
  * Rename HANA backup/restore OTEs to reflect they are supported
    for all disks and not just persistent disk
  * Increase the timeout for HDB stop to account for busy DBs
  * Adding project sap-ecs-testing to the list.
  * PD Restore - Support provisioned-iops and provisioned-throughput
  * Integration test for configure OTE
  * Added precondition in hana pd backup for stripped LVM
  * Add a precondition check to verify user has passed a valid
    snapshot name that is present in the current project
  * Update the usage to reflect additional required param
  * Minor path update for supportbundle OTE.
  * Fixing bug in slow moving metrics partial collection scenarios
  * Adding check for agent status after restart.
  * Ensure Backint ComposeChunks has a valid bucket handle
  * Discover whether a Netweaver instance is ABAP or Java
  * Replace standard slices package with third party version
  * WLM HANA metric `ha_in_same_zone` now reports instance
    names for HA nodes in the same zone
  * Fix data race condition for Backint Backup with new client connections
  * Make -new-disk-name a required parameter to avoid the 63 char
    limit in the name length due to auto-generated names
  * Fix command for collecting Corosync metric `two_node_runtime`
  * Make snapshot name similar to disk name
  * Bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * Enable Discovery config flag controls submission
    to Data Warehouse and Cloud Logging
  * Create new clients for each operation in Backint
  * Add `client_endpoint` to Backint proto.
  * Getting the build number into the version for display
  * Backint config name change: service_account to service_account_key
  * Add HANA HA metrics to collection definition.
  * Fix sorting bug in a diff in apps_discovery_test.go
  * Add discoverHANATenantDBs to main code path
  * Change PIPE filemode to WRONLY to allow us to detect broken pipes
  * Deprecate `sap_system_discovery` config field in favor of `enable_discovery`
  * Move the validation of whether user passed correct PD, before stopping HANA
  * Add a placeholder for public doc link with next steps
    after hanapdrestore workflow has completed
  * Fix executable path for HDB version command
  * Add optional param `new-disk-name` to hanapdrestore
    for users that wish to override the default
  * Sort the skipmetrics in unit test to avoid order related flakes
  * Generalizing configure OTE
  * Discover Netweaver kernel version
  * Fix Sprintf call
  * Use SAP System data to determine if HANA HA nodes share the same zone.
  * hanapdrestore - do not delete PDs in case of failures
  * Create discoverHANATenantDBs method to support multiple SIDs for HANA tenant DBs
  * Send additional fields in Data Warehouse WriteInsightRequest
  * Updating the username parameters for hana pd backup and restore
  * Retrieve Reliability data every 2 hours instead of 24
  * Discover HANA version
  * Fix import for GitHub build
  * Add instance properties, and topology information to system data
  * Keep the device nam and disk name same after restore
  * Move sapdiscovery package into system package
  * Changer the default name of the disk created by restore workflow
  * Updates the generated protobuf go for system.proto
  * Update generated system proto
  * Update go.yml
  * Add topology and instance properties info to SAP System data
  * Add a check to verify the disk is attached to instance, fail if disk is not attached
  * Add application and database software properties to system representation
  * Fix race condition in heartbeat test case
  * Add error handling to restore workflow to try and keep
    the HANA system in a clean state on failures
  * Enable LogToCloud by default for both OTE and Daemon modes
  * Bump Agent version to 3.0
  * Reliability OTE added to SAP Agent
  * Declare public Get interface for SAP System discovery data
  * Integration testing for Networkstats Package
  * Adding project sap-ecs-testing to the list
  * Adding one time execution for enabling/disabling of features
  * Change to using custom retries for initial bucket connection
  * Default collection definition to be fetched from GCS
  * Add a 2 minute context timeout for initial bucket connection
  * Add `collection_config_version` as a WLM system metric
  * Make project, host param optional for hanapdbackup,
    in addition make user param optional for hanapdrestore
  * Fix potential nil dereference WLM metrics collection
  * Add force-stop-hana to restore workflow to forcefully stop
    HANA when the param is passed
  * Rename the HANA PD snapshot and restore workflows
  * Add unit tests for GetProvisionIOps and GetProvisionedThoughput
  * Remove the TestCollect unit test which relies on nc
    command which can be flaky in unit tests
  * Increase Backint timeout for PIPE files to 3 minutes
  * Add XFS freeze and unfreeze to PD based snapshot</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708430400">- Update to version 3.1 (bsc#1220010, bsc#1220111)
  * Fixing system replication status code being returned
  * Reduce disk snapshot wait durations
  * Fix test flakes in workloadcollector test.
  * adding metrics for db freeze time and total workflow time
  * Fix for SAP System discovery adding the current host to all components.
  * Restore default WLM metric collection settings.
  * change description of validate OTE
  * fix a typo in the command name and add a delay before we try the unmount
  * Use underscore as separator for flags in place of hyphens
  * Enable host_metrics and disable reliability_metrics by default in configure OTE
  * Collect reliability metrics in the free namespace
  * Remove user from cmd params for HANA Replication
  * Enable workload manager metric collection by default.
  * Add support configuration flag to enable legacy WLM metric data submission workflow.
  * Lowers the log level of discovery to info
  * Fix for HANA Replication Config
  * Add additional instance-id parameter for users who do not want to provide port number
  * Use _ instead of - for parameters in configurebackint
  * Implementing panic recovery to HANA Monitoring: CreateWorkerPool
  * Fix issue with process metrics subroutine starting.
  * Add a flag to enable or disable workload discovery.
  * Reduce logs in sapdiscovery to debug, these are now run a
    lot more frequently and are flooding the logs
  * Use bucket `cloudsapdeploystaging` for staging environment.
  * Updates default value handling for system discovery flag.
  * Added default values to some frequency flags in configure OTE
  * force a sync before unmounting to clear out stale file handles
  * Retain recoverable routine in process metrics.
  * Ensures slow metrics workers stop on context cancellation.
  * Log lsof output if unmount fails during restore
  * SAP Discovery - Discover R3trans data
  * Add panic recovery to collectiondefinition update routine
  * configurebackint OTE.
  * Adding panic recovery to remote.go
  * Prevent host metrics from restarting the daily metrics report if it has already been started.
  * Add panic recovery to agent metrics
  * Implementing panic recovery for hana monitoring: logging action daily
  * Routines now use their own context and cancel in the event of a panic recovery.
  * Add panic recovery to host metrics routines
  * Removed -path flag and fixed usage string
  * Add workload properties to the SAP System definition.
  * Add panic recovery to collectMetricsFromConfig routines.
  * Add panic recovery to fast metric collection routine.
  * Reduces the log severity to debug for the exponential backoff policy
  * Add panic recovery to heartbeat routine.
  * Updating configuration.json file to remove deprecated sap_discovery field
  * Use protojson instead of custom function for snake_case marshaling
  * Add panic recovery to WLM metrics collection
  * HANA Insights rules tranche 11: Create unit tests and add to auto push
  * Add panic recovery to workload collector daily usage metrics.
  * Processmetrics - suppress Error and Warn logs that really need to be debug
  * Formatting the output of messages printed by configure OTE
  * Changing flag names of configure OTE to align better with configuration.json fields
  * Add automatic panic recovery to slow metrics collection
  * Add panic recovery to goroutine collectAndSend
  * Add panic recovery to goroutine
  * Retain recoverable routines beyond function scope.
  * Implement recovery handler for SAP System discovery package
  * Tranche 11: HRE Rules
  * Update github build
  * Adds generic panic recovery to SAP System discovery package
  * Initialize the sidadm env to ensure restore can be run as root user
  * not pacaking gcbdr scripts till launch of the feature
  * Change datatype of frequency flags from string to int
  * Breaking down --frequency flag into separate flags for different features for better isolation
  * Fix configuration.json file from being written in camelCase to snake_case
  * Tranche 6,7,8,9,10: HRE Rules
  * Suppress pacemaker related log from Error to Debug
  * creating the OTE for GCBDR discovery
  * Update HA node identification
  * Tranche 10: HRE Rules
  * Update file permissions and ownership for installbackint when running as root.
  * Adding newline after version print.
  * Exposing HANA Logical volumes availability metrics
  * Make workloadmanager parameters test more robust.
  * Fix panic in cloud discovery
  * Tranche 10: HRE Rules
  * Add recovery_folder_prefix parameter to Backint.
  * Mark process_metrics_send_frequency as deprecated
  * Add snapshot-type param to hanadiskbackup with default as STANDARD
    type. Users can override to ARCHIVE type if needed.
  * Add new folder_prefix parameter to Backint.
  * Add HANA new HANA insight rules to BUILD file and embed sources
  * Tranche 10a: HRE Rules
  * Tranche 6b: HRE Rules
  * Tranche 8b: HRE Rules
  * Fix for sending isABAP value
  * Updating logusage command line flags</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Update to version 3.2 (bsc#1222215, bsc#1222216)
  * Remove internal gensupport package.
  * Restore additional error handling and response checking to internal data warehouse client.
  * Updating the aggregate function in HANA insight rules
  * Remove a leftover debug log
  * Allow multipart uploads for PIPE file types.
  * Update go-hdb version to v1.8.0
  * Perform log restores in serial rather than parallel.
  * Add sample usage examples to commandlineexecutor
  * Small update to configureinstance OTE
  * Add nil check in backup and restore flows to protect against panics.
  * Close http response body in WriteInsight() and soap.go
  * Record topology type.
  * Initialize usagemetrics for OTEs
  * Add Instance Number to SAP System instance properties
  * Set `min_version` for WLM `os_settings` system metric.
  * Increase timeout for saptune re-apply commands.
  * Adding handling for encrypted snapshots in backup and restore
  * Change the version check comparisons to account for versions
    older than those listed in SAP Note.
  * Skip the Netweaver metrics that need dpmon on NW kernels
    affected by SAP Note: 3366597
  * Fix imports
  * No public description
  * Use internal data warehouse client.
  * Fix disp+work command invocation for Netweaver Kernel version discovery.
  * Add note about default parameter values to installbackint.
  * Add mutex in multipart writer for potential data races.
  * Update go.mod and go.sum
  * Skip XFS freeze by default unless user passes a parameter to do it explicitly
  * configureinstance minor updates.
  * Add safety check for usage metrics on BMS
  * Storage Class parameter added to Backint.
  * Update configureinstance's X4 saptune conf.
  * XML Multipart Write() and Close() methods completed.
  * Fixes the vmmanager policies for sles12 and sles15 used in the cloud console removes
    the individual cloud console policies and consolidates them into one Adds a general
    gcloud command line policy
  * Standardize logging for workloadmanager package.
  * Multipart XML API Uploads for Backint.
  * Add database system SID to database properties.
  * Fix NW HA node identification for RedHat deployments.
  * Add workload properties to discovery object returned by discoverSAPSystems
  * Add ASCS instance number to application data
  * Add Workload Manager validation rule for checking OS settings.
  * Enable WLM metric collection by default, disable submission of data to Cloud Monitoring.
  * Decoupling primary executable command and providing an alternative to lsof
  * Added HANA version in support bundle collection
  * Add WorkloadProperties to merged system details and to WLM Insights
  * Replace the link placeholder with the actual link
  * Add instance number to SAP discovery data
  * Tranche 12: HRE Rules
  * Minor typo fix in workloadmanager's hana metrics module
  * Add pacemaker metrics with SID labels to process metrics
  * updating the regex for backup and backint files to take care of log rotation in support bundle
  * Add support for disk snapshot labels for easy lifecycle management of snapshots
  * Added new OTE for changedisktype workflow
  * Add WorkloadProperties to SapSystemDetails for apps_discovery
  * Testing the timeseries in unit tests instead of just checking the count
  * Record Netweaver kernel version.
  * Tranche 12: HRE Rules
  * Testing the timeseries in unit tests instead of just checking the count
  * Testing the timeseries in unit tests instead of just checking the count
  * Relocating pacemaker collection related packages to internal/pacemaker
    for common use between process metrics and WLM
  * Use results from latest round of discovery for the collection of process metrics.
  * Handling zero rows returned case better in HANA insights
  * Adding docstrings to workloadmanager package
  * Adding docstring to configure OTE
  * adding docstrings to methods in support bundle
  * Add X4 specific configurations to configureinstance OTE.
  * Add helper functions to configureinstance OTE.
  * Display updates for HANA Insights WLM rules rollout.
  * configureinstance OTE
  * We expect the command to return a non-zero exit code and we should not be
    returning an error. Execute treats non-zero exit code as error.
  * Removing the sap control process command line params
  * Revert "Fixing system replication status code being returned"
  * configureinstance OTE
  * We expect the command to return a non-zero exit code and we should not be
    returning an error. Execute treats non-zero exit code as error.
  * Removing the sap control process command line params
  * Fixing system replication status code being returned
  * Wait for hdbindex server to stop after HANA is stopped
  * Log error to console in cases where LVM is not being used
  * Adding JournalCTL logs to support bunddle
  * hanadiskbckup - Add missing params to the Usage string
  * Move usagemetrics package into shared folder
  * Fixed data race error in TestCollectAndSendSlowMovingMetrics()
  * Disk backup/restore - Enable send-metrics-to-monitoring by default</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1717156800">- Update to version 3.3 (bsc#1225166, bsc#1225558)
  * Build updated to use -mod=vendor during build
  * Updated go.mod and go.sum with dependencies for safetext,
    using go mod vendor for github action
  * Add actual values and comments to usagemetrics.go to ensure that
    error and action codes are only appended to the end of the list.
  * Remove usage metrics from configureinstance.go
  * Add a hard Disable for reliability metrics collection
    until the namespace is created and tested.
  * Adding metrics for time taken by each query
  * Add SHA224 of labels as a new label.
  * Remove collect_reliability_metrics from configuration.json
  * Small tweaks to backint log and inquire path generation
  * Fix for unmarshalling backint configuration.
  * Implementation of instant snapshot group backup workflow
  * Backint changes around shorten_folder_path
  * Rename max_diagnose_size_gb to diagnose_file_max_size_gb
  * Adding start and finish logs in performance diagnostics
  * Validate that all disks mapped to /hana/data belong to the same consistency group.
  * Rename backint monitoring metrics parameter
  * Trim folder prefix for Backint INQUIRE output.
  * Add the ability to test the database connection
  * Reduce log level of some storage messages to debug.
  * Finalize guest action request and response format.
  * Backint dashboard fix logs
  * Add scorecards to backint dashboard
  * Making proto changes for HANA Monitoring support
    for multiple tennats and ha setup
  * Add total upload/download time to log.
  * Add HANA indexserver.ini metrics to WLM metric collection.
  * Add Netweaver role metrics as part of process metrics
  * Rotate old support bundles.
  * Update the default value of confirm-data-snapshot-after-create
    to false. and add to usage()
  * Add option to confirm HANA snapshot as successful before disk snapshot is uploaded.
  * Change log level from warn to info for non-critical messages.
  * Add diagnose_folder parameter to Backint
  * Add a 1 GB buffer to needed bytes for diagnostic
  * Add labels to group snapshot backup.
  * Enable the show status and restart agent functions for Windows.
  * Add WLM metric collection for num_completion_queues and num_submit_queues.
  * Collect support bundle on Backint errors.
  * Adding usage metrics to performance diagnostics
  * Collect agent-only support bundle on failure of backint and hanadiskbackup.
  * Minor Backint improvements
  * Add ability collect only agent logs using agent-logs-only flag to supportbundle
  * Bump version to 3.3
  * Add Backint metrics dashboard
  * DO NOT remove log files on uninstall
  * Adding more unit tests
  * Changing location of zipped file to within the
    final folder identified by unique timestamp.
  * Minor refactorings and improvements with increasing code coverage
  * Make sure DB instance number is recorded in System data.
  * Change configuration.json to 0664 to ensure world cannot write.
  * Add Netweaver Java discovery to SAP Agent.
  * Add a new version of functions to read cloud properties from metadata server.
  * Updating generated protos to proc-gen-go v1.34.1
  * Updating runConfigureInstance method and adding unit tests
    for covering configure instance ote invocation
  * Zip the final bundle and add upload functionality
  * Record database SID alongside tenant DB SIDs
  * Reduce log severity in discovery
  * Add HANA version to product version data
  * Fix race condition in tests
  * Read disk mapping from instance info if source disk
    is not provided to hanadiskbackup
  * Add option to shorten the folder path in the bucket.
  * Add SSL support for cmdline-based querying and some bugfixes
  * Move recovery package to shared directory.
  * Update protoc-gen-go version to v1.34.0 in multiple protos
  * Adding FIO commands to performance diagnostics
  * Remove error logs when errors are being returned
  * Adding perfdiag to performance diagnostics
  * Add AppInstance data to discovery data uploads.
  * Introduce protos for guestactions messages and responses.
    Support multiple commands per message.
  * Update wording for HANA Insights rules.
  * Configureinstance updates.
  * Adding a check for retention policy before performing backup operation.
  * Remove the unused loglevel flag from logusage OTE
  * Change the language around the default parameters being
    optimized for performance in backint
  * Add instance role to SAP System properties
  * Increase wait time for index server to stop.
  * Integrating backint OTE into performancediagnostics
  * Update wording around configureinstance unsupported machine type.
  * Pass the right disk name to check if disk is attached
  * Integrating new DB Handle and hdbuserstore key support
    with remaining HANA DB dependant workflows
  * Refactor HANA and filesystems specific code to a common hanabackup package
  * Bumps x/net dependency to v0.23
  * Append HANA Insights rule to WLM fake metrics file in script to generate WLM rule.
  * Integrating configure instance ote in performance diagnostics
  * Update disk backup OTE to parse paths even with /dev/mapper
    in the middle of path, not necessarily as a prefix
  * Adding a few missing labels to wlm-fake-metrics.yaml
  * Changing loglevel for onetime.Init() calls
  * Refactor change - Move PD related functions to gce.go
  * Fix agentcommunication import replace statements
  * Update replace functions for new open source dependencies.
  * Set up scaffolding for guest actions handling in SAP Agent along with UAP library code
  * Backint upload/download metrics sent to cloud monitoring.
  * Cleaning up the performance diagntics file wth recent changes
  * Fixes to usage strings in OTEs for optional params
  * Integrating new database connector with HANA Monitoring
    and adding support for HDBUserstore Key
  * Implement hdbsql commandline result parsing
  * SAP Discovery - Add SAP Instance Numbers to instance properties
  * Updating OTEs to include params for when OTE is invoked internally
  * Modifying flags to follow design changes
  * Create fake WLM metric overrides for testing
  * Implement constructors and query functions for querying
    HANA DB via hdbuserstore using cmdline
  * Skeleton for querying HANA DB via hdbuserstore using cmdline
  * Parameterize Backint Diagnose max file size.
  * Metadata parameter added to Backint.
  * Adding initial layout for performance diagnostics OTE
  * Create a new API CreateClient() in shared logging which
    returns an error in case of failures
  * Backint no longer writes ERROR if temporary chunk failed to delete.
  * Create onetime.Init() to condense reused code.
  * Fixing a typo in a process metrics retry logic comment
  * Rename workload_validation param with workload_evaluation in configure OTE
  * Send agent version in Write Insight requests
  * Ensuring /sap/cluster/resources covers all the nodes.</changelog>
</package>
<package pkgid="3ebdf845a10f3ed4d96b7f49bff6dc76e3e0b343e514b194c6dd01d357fb4cbf" name="google-errorprone" arch="src">
  <version epoch="0" ver="2.26.1" rel="150200.5.6.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of some error_prone artifacts version 2.11.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="fstrba@suse.com" date="1713182400">- Upgrade to version 2.26.1
  * Changes of version 2.26.1:
    + Fixes the module name: from 'com.google.errorprone.annotation'
    to 'com.google.errorprone.annotations'. Amends the OSGi build
    not to include 'Automatic-Module-Name' in the MANIFEST.MF for the
    'annotations' project.
  * Changes of version 2.26.0:
    + The 'annotations' artifact now includes a module-info.java for
    Java Platform Module System support.
    + Disabled checks passed to -XepPatchChecks are now ignored,
    instead of causing a crash.
    + New checks:
  - SystemConsoleNull: Null-checking System.console() is not a
    reliable way to detect if the console is connected to a
    terminal.
  - EnumOrdinal: Discourage uses of Enum.ordinal()
    + Closed issues:
  - Add module-info.java #2649
  - 2.19.x: Exception thrown when a disabled check is passed to
  - XepPatchChecks #3908
  - Ignore disabled checks passed to -XepPatchChecks #4028
  - feat: add jpms definition for annotations #4311
  - Add the 'compile' goal for 'compile-java9' #4314
  * Changes of version 2.25.0:
    + New checks:
  - JUnitIncompatibleType: Detects incompatible types passed to
    an assertion, similar to TruthIncompatibleType
  - RedundantSetterCall: Detects fields set twice in the same
    chained expression. Generalization of previous
    ProtoRedundantSet check to also handle AutoValue.
    + Closed issues:
  - Crash in UnnecessaryStringBuilder #4195
  - Fix typos #4224
  - Add support for specifying badEnclosingTypes for BadImport
    via flags #4228
  - Some BugPattern docs are missing code examples #4248
  - Remove incorrect statement from BugPattern index doc #4249
  - Do not report NonFinalStaticField findings for fields
    modified in @BeforeAll methods #4251
  * Changes of version 2.24.1:
    + Add an assertion to try to help debug #4225
  * Changes of version 2.24.0:
    + New checks:
  - MultipleNullnessAnnotations: Discourage multiple nullness
    annotations
  - NullableTypeParameter: Discourage nullness annotations on
    type parameters
  - NullableWildcard: Discourage nullness annotations on
    wildcards
  - SuperCallToObjectMethod: Generalization of
    SuperEqualsIsObjectEquals, now covers hashCode
  * Changes of version 2.23.0:
    + New checks: DuplicateDateFormatField, NonFinalStaticField,
    StringCharset, StringFormatWithLiteral,
    SuperEqualsIsObjectEquals
    + Bug fixes and improvements: #3897, #4114, #4123
  * Changes of version 2.22.0:
    + New checks:
  - ClosingStandardOutputStreams: Prevents accidentally closing
    System.{out,err} with try-with-resources
  - TruthContainsExactlyElementsInUsage: containsExactly is
    preferred over containsExactlyElementsIn when creating new
    iterables
  - UnnecessaryAsync: detects unnecessary use of async
    primitives in local (and hence single-threaded) scopes
  - ReturnAtTheEndOfVoidFunction: detects unnecessary return
    statements at the end of void functions
  - MultimapKeys: Suggests using keySet() instead of iterating
    over Multimap.keys(), which does not collapse duplicates
    + Bug fixes and improvements:
  - Don't complain about literal IP addresses in
    AddressSelection
  - Prevent SuggestedFixes#renameMethod from modifying return
    type declaration
  - Fix UnusedVariable false positives for private record
    parameters
  - When running in conservative mode, no longer assume that
    implementations of Map.get, etc. return null
  - CanIgnoreReturnValueSuggester: Support additional exempting
    method annotations
  - UnusedVariable: exclude junit5's @RegisterExtension
  - Support running all available patch checks
  - Upgrade java-diff-utils 4.0 -&gt; 4.12
  - Flag unused Refaster template parameters
  - Support @SuppressWarnings("all")
  - Prevent Refaster UMemberSelect from matching method
    parameters
  - MissingDefault : Don't require // fall out comments on
    expression switches
  - Skip UnnecessaryLambda findings for usages in enhanced for
    loops
  - Fix bug where nested MissingBraces violations' suggested
    fixes result in broken code
  - Add support for specifying exemptPrefixes/exemptNames for
    UnusedVariable via flags
  - UnusedMethod: Added exempting variable annotations
  * Changes of version 2.21.1:
    + Handle overlapping ranges in suppressedRegions
    + Add AddressSelection to discourage APIs that convert a
    hostname to a single address
  * Changes of version 2.21.0:
    + New Checkers:
  - AttemptedNegativeZero: Prevents accidental use of -0, which
    is the same as 0. The floating-point negative zero is -0.0.
  - ICCProfileGetInstance: Warns on uses of
    ICC_Profile.getInstance(String), due to JDK-8191622.
  - MutableGuiceModule: Fields in Guice modules should be final.
  - NullableOptional: Discourages @Nullable-annotated Optionals.
  - OverridingMethodInconsistentArgumentNamesChecker: Arguments
    of overriding method are inconsistent with overridden
    method.
    + Fixed issues:
  - Avoid MemberName IOOBE on lambda parameters inside
    overriding methods #3976
  - Improve LockOnNonEnclosingClassLiteral documentation #3986
  - Security scan reported high CVE for
    com.google.guava:guava:31.1-jre #4001
  - Upgrade guava to 32.0.1 #4002
  - Proposal: checker to prevent other checkers from calling
    javac methods that changed across JDKs #4026
  - Add support in ASTHelpersSuggestions for getEnclosedElements
    [#4027]
  * Changes of version 2.20.0:
    + This release is compatible with early-access builds of JDK 21.
    + New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder,
    BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain,
    LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation,
    NamedLikeContextualKeyword, NonApiType
    + Fixes issues:
  - Introduce MissingRefasterAnnotation checker #2232
  - Fix minor typo in URepeated #2243
  - Drop unused constant Template#AUTOBOXING_DEFAULT #2997
  - Introduce command-line flag -XepAllSuggestionsAsWarnings
    [#3301]
  - JDK21 compatibility #3843
  - Add OSGi runtime metadata to error-prone's MANIFEST.MF files
    [#3903]
  - Use EISOP Checker Framework version 3.34.0-eisop1 #3918
  - NotJavadoc pattern does not allow Javadoc on module
    declarations #3923
  - ErrorProneInjector incorrectly picks up the no-args
    constructor #3931
  - Several high CVEs related to dependency
    com.google.protobuf:protobuf-java:3.19.2 #3945
  - Upgrade protobuf-java to 3.19.6 #3946
  * Changes of version 2.19.1:
    + This release fixes a binary compatibility issue when running
    on JDK 11
  * Changes of version 2.19.0:
    + New Checkers: NotJavadoc, StringCaseLocaleUsage,
    UnnecessaryTestMethodPrefix
    + Fixes issues:
  - Exclude inner classes annotated with @Nested from
    ClassCanBeStatic rule #956
  - Optimize VisitorState#getSymbolFromName #3504
  - ClassCanBeStatic: Exclude JUnit @Nested classes #3654
  - BadImport: flag static import of newInstance methods #3703
  - Support given for enforcing DirectInvocationOnMock: issue
    3396 #3731
  - Handle yield statement case in ASTHelpers#targetType #3737
  - Should ASTHelpers.getSymbol(Tree) be annotated with
    @Nullable? #3760
  - Fix '@' character in javadoc code snippets #3779
  - Replace guava cache with caffeine #3796
  - Discourage APIs locale-dependent APIs like
    String.to{Lower,Upper}Case #3809
  - Introduce StringCaseLocaleUsage check #3813
  * Changes of version 2.18.0:
    + New Checkers: InjectOnBugCheckers, LabelledBreakTarget,
    UnusedLabel, YodaCondition
    + Fixes issues:
  - @SuppressWarnings("InlineFormatString") doesn't work #1650
  - Refaster: support method invocation type argument inlining
    [#2706]
  - java.lang.IllegalArgumentException: Cannot edit synthetic
    AST nodes with specific record constructor #3404
  - Rename class to match filename #3493
  - Optimize VisitorState#getSymbolFromName #3504
  - refactor: refactor bad smell UnusedLabel #3519
  - LambdaFunctionalInterface crash with
    IllegalArgumentException when processing an enum constructor
    taking a lambda #3579
  - Fix JDK 20-ea build compatibility #3610
  - UngroupedOverloads: ignore generated constructors #3632
  - [errorprone 2.17.0] NPE in
    StatementSwitchToExpressionSwitch.analyzeSwitchTree #3638
  - StatementSwitchToExpressionSwitch: handle empty statement
    blocks #3645
  - StatementSwitchToExpressionSwitch: only trigger on
    compatible target versions #3646
  - Fix Finalize bugpattern to match protected finalize() #3652
  - Make MemoizeConstantVisitorStateLookups check suppressible
    [#3690]
  * Changes of version 2.17.0:
    + New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter,
    ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem,
    StatementSwitchToExpressionSwitch, UnqualifiedYield
    + Fixed issues:
  - InvalidParam warning on Javadoc for Java record components
    [#2321]
  - UnusedMethod flags @JsonValue methods as unused #3144
  - UnusedMethod: Add more JPA lifecycle annotations or make
    annotations configurable #3297
  - UnusedMethod: Support additional exempting method
    annotations #3428
  - Have InvalidParam support records #3437
  - Fix -XepDisableAllWarnings flag when passed on its own #3462
  - ASTHelpersSuggestions does not flag call to packge() on
    com.sun.tools.javac.code.Symbol.ClassSymbol #3482
  - @SupressWarnings on record compact constructor causes crash
    [#3494]
  * Changes of version 2.16.0:
    + New Checkers: ASTHelpersSuggestions,
    CanIgnoreReturnValueSuggester, LenientFormatStringValidation,
    UnnecessarilyUsedValue
    + Fixed issues:
  - Avoid using non-ASCII Unicode characters outside of comments
    and literals #3092
  - NullPointerException thrown during analysis #3220
  - NPE analysing new style switch statement (2.14.0) #3225
  - ImmutableChecker handles null types #3267
  - Drop pre-JDK 11 logic from Refaster's Inliner class #3441
  * Changes of version 2.15.0:
    + New Checkers: BuilderReturnThis,
    CanIgnoreReturnValueSuggester, CannotMockFinalClass,
    CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject,
    MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses,
    NullArgumentForNonNullParameter, SelfAlwaysReturnsThis,
    UnsafeWildcard, UnusedTypeParameter
  * Changes of version 2.14.0:
    + New checkers: BanJNDI,  EmptyTopLevelDeclaration,
    ErroneousBitwiseExpression,
    FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption,
    NullableOnContainingClass
  * Changes of version 2.13.1:
    + Fix a crash in UnnecessaryBoxedVariable
    + Include the unicode character in the diagnostic message
  * Changes of version 2.13.0:
    + Handle all annotations with the simple name Generated in
  - XepDisableWarningsInGeneratedCode
    + Reconcile BugChecker#isSuppressed with suppression handling in
    ErrorProneScanner
    + Fix a bug in enclosingPackage
    + Improve performance of fix application
    + Implicitly treat @AutoBuilder setter methods as
    @CanIgnoreReturnValue.
    + Remove some obsolete checks
    (PublicConstructorForAbstractClass, HashCodeToString)
  * Changes of version 2.12.1:
    + This release adds an infrastructure optimization to AppliedFix
    source code processing.
  * Changes of version 2.12.0:
    + New checks: BoxedPrimitiveEquality, DoubleBraceInitialization,
    IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod,
    LongDoubleConversion, RobolectricShadowDirectlyOn,
    StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion,
    Varifier</changelog>
</package>
<package pkgid="8af1145263474d2ec7a58497cd0dd171826523f61e485a695cceece4feb2466e" name="google-errorprone-annotation" arch="noarch">
  <version epoch="0" ver="2.26.1" rel="150200.5.6.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of some error_prone artifacts version 2.11.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="fstrba@suse.com" date="1713182400">- Upgrade to version 2.26.1
  * Changes of version 2.26.1:
    + Fixes the module name: from 'com.google.errorprone.annotation'
    to 'com.google.errorprone.annotations'. Amends the OSGi build
    not to include 'Automatic-Module-Name' in the MANIFEST.MF for the
    'annotations' project.
  * Changes of version 2.26.0:
    + The 'annotations' artifact now includes a module-info.java for
    Java Platform Module System support.
    + Disabled checks passed to -XepPatchChecks are now ignored,
    instead of causing a crash.
    + New checks:
  - SystemConsoleNull: Null-checking System.console() is not a
    reliable way to detect if the console is connected to a
    terminal.
  - EnumOrdinal: Discourage uses of Enum.ordinal()
    + Closed issues:
  - Add module-info.java #2649
  - 2.19.x: Exception thrown when a disabled check is passed to
  - XepPatchChecks #3908
  - Ignore disabled checks passed to -XepPatchChecks #4028
  - feat: add jpms definition for annotations #4311
  - Add the 'compile' goal for 'compile-java9' #4314
  * Changes of version 2.25.0:
    + New checks:
  - JUnitIncompatibleType: Detects incompatible types passed to
    an assertion, similar to TruthIncompatibleType
  - RedundantSetterCall: Detects fields set twice in the same
    chained expression. Generalization of previous
    ProtoRedundantSet check to also handle AutoValue.
    + Closed issues:
  - Crash in UnnecessaryStringBuilder #4195
  - Fix typos #4224
  - Add support for specifying badEnclosingTypes for BadImport
    via flags #4228
  - Some BugPattern docs are missing code examples #4248
  - Remove incorrect statement from BugPattern index doc #4249
  - Do not report NonFinalStaticField findings for fields
    modified in @BeforeAll methods #4251
  * Changes of version 2.24.1:
    + Add an assertion to try to help debug #4225
  * Changes of version 2.24.0:
    + New checks:
  - MultipleNullnessAnnotations: Discourage multiple nullness
    annotations
  - NullableTypeParameter: Discourage nullness annotations on
    type parameters
  - NullableWildcard: Discourage nullness annotations on
    wildcards
  - SuperCallToObjectMethod: Generalization of
    SuperEqualsIsObjectEquals, now covers hashCode
  * Changes of version 2.23.0:
    + New checks: DuplicateDateFormatField, NonFinalStaticField,
    StringCharset, StringFormatWithLiteral,
    SuperEqualsIsObjectEquals
    + Bug fixes and improvements: #3897, #4114, #4123
  * Changes of version 2.22.0:
    + New checks:
  - ClosingStandardOutputStreams: Prevents accidentally closing
    System.{out,err} with try-with-resources
  - TruthContainsExactlyElementsInUsage: containsExactly is
    preferred over containsExactlyElementsIn when creating new
    iterables
  - UnnecessaryAsync: detects unnecessary use of async
    primitives in local (and hence single-threaded) scopes
  - ReturnAtTheEndOfVoidFunction: detects unnecessary return
    statements at the end of void functions
  - MultimapKeys: Suggests using keySet() instead of iterating
    over Multimap.keys(), which does not collapse duplicates
    + Bug fixes and improvements:
  - Don't complain about literal IP addresses in
    AddressSelection
  - Prevent SuggestedFixes#renameMethod from modifying return
    type declaration
  - Fix UnusedVariable false positives for private record
    parameters
  - When running in conservative mode, no longer assume that
    implementations of Map.get, etc. return null
  - CanIgnoreReturnValueSuggester: Support additional exempting
    method annotations
  - UnusedVariable: exclude junit5's @RegisterExtension
  - Support running all available patch checks
  - Upgrade java-diff-utils 4.0 -&gt; 4.12
  - Flag unused Refaster template parameters
  - Support @SuppressWarnings("all")
  - Prevent Refaster UMemberSelect from matching method
    parameters
  - MissingDefault : Don't require // fall out comments on
    expression switches
  - Skip UnnecessaryLambda findings for usages in enhanced for
    loops
  - Fix bug where nested MissingBraces violations' suggested
    fixes result in broken code
  - Add support for specifying exemptPrefixes/exemptNames for
    UnusedVariable via flags
  - UnusedMethod: Added exempting variable annotations
  * Changes of version 2.21.1:
    + Handle overlapping ranges in suppressedRegions
    + Add AddressSelection to discourage APIs that convert a
    hostname to a single address
  * Changes of version 2.21.0:
    + New Checkers:
  - AttemptedNegativeZero: Prevents accidental use of -0, which
    is the same as 0. The floating-point negative zero is -0.0.
  - ICCProfileGetInstance: Warns on uses of
    ICC_Profile.getInstance(String), due to JDK-8191622.
  - MutableGuiceModule: Fields in Guice modules should be final.
  - NullableOptional: Discourages @Nullable-annotated Optionals.
  - OverridingMethodInconsistentArgumentNamesChecker: Arguments
    of overriding method are inconsistent with overridden
    method.
    + Fixed issues:
  - Avoid MemberName IOOBE on lambda parameters inside
    overriding methods #3976
  - Improve LockOnNonEnclosingClassLiteral documentation #3986
  - Security scan reported high CVE for
    com.google.guava:guava:31.1-jre #4001
  - Upgrade guava to 32.0.1 #4002
  - Proposal: checker to prevent other checkers from calling
    javac methods that changed across JDKs #4026
  - Add support in ASTHelpersSuggestions for getEnclosedElements
    [#4027]
  * Changes of version 2.20.0:
    + This release is compatible with early-access builds of JDK 21.
    + New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder,
    BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain,
    LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation,
    NamedLikeContextualKeyword, NonApiType
    + Fixes issues:
  - Introduce MissingRefasterAnnotation checker #2232
  - Fix minor typo in URepeated #2243
  - Drop unused constant Template#AUTOBOXING_DEFAULT #2997
  - Introduce command-line flag -XepAllSuggestionsAsWarnings
    [#3301]
  - JDK21 compatibility #3843
  - Add OSGi runtime metadata to error-prone's MANIFEST.MF files
    [#3903]
  - Use EISOP Checker Framework version 3.34.0-eisop1 #3918
  - NotJavadoc pattern does not allow Javadoc on module
    declarations #3923
  - ErrorProneInjector incorrectly picks up the no-args
    constructor #3931
  - Several high CVEs related to dependency
    com.google.protobuf:protobuf-java:3.19.2 #3945
  - Upgrade protobuf-java to 3.19.6 #3946
  * Changes of version 2.19.1:
    + This release fixes a binary compatibility issue when running
    on JDK 11
  * Changes of version 2.19.0:
    + New Checkers: NotJavadoc, StringCaseLocaleUsage,
    UnnecessaryTestMethodPrefix
    + Fixes issues:
  - Exclude inner classes annotated with @Nested from
    ClassCanBeStatic rule #956
  - Optimize VisitorState#getSymbolFromName #3504
  - ClassCanBeStatic: Exclude JUnit @Nested classes #3654
  - BadImport: flag static import of newInstance methods #3703
  - Support given for enforcing DirectInvocationOnMock: issue
    3396 #3731
  - Handle yield statement case in ASTHelpers#targetType #3737
  - Should ASTHelpers.getSymbol(Tree) be annotated with
    @Nullable? #3760
  - Fix '@' character in javadoc code snippets #3779
  - Replace guava cache with caffeine #3796
  - Discourage APIs locale-dependent APIs like
    String.to{Lower,Upper}Case #3809
  - Introduce StringCaseLocaleUsage check #3813
  * Changes of version 2.18.0:
    + New Checkers: InjectOnBugCheckers, LabelledBreakTarget,
    UnusedLabel, YodaCondition
    + Fixes issues:
  - @SuppressWarnings("InlineFormatString") doesn't work #1650
  - Refaster: support method invocation type argument inlining
    [#2706]
  - java.lang.IllegalArgumentException: Cannot edit synthetic
    AST nodes with specific record constructor #3404
  - Rename class to match filename #3493
  - Optimize VisitorState#getSymbolFromName #3504
  - refactor: refactor bad smell UnusedLabel #3519
  - LambdaFunctionalInterface crash with
    IllegalArgumentException when processing an enum constructor
    taking a lambda #3579
  - Fix JDK 20-ea build compatibility #3610
  - UngroupedOverloads: ignore generated constructors #3632
  - [errorprone 2.17.0] NPE in
    StatementSwitchToExpressionSwitch.analyzeSwitchTree #3638
  - StatementSwitchToExpressionSwitch: handle empty statement
    blocks #3645
  - StatementSwitchToExpressionSwitch: only trigger on
    compatible target versions #3646
  - Fix Finalize bugpattern to match protected finalize() #3652
  - Make MemoizeConstantVisitorStateLookups check suppressible
    [#3690]
  * Changes of version 2.17.0:
    + New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter,
    ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem,
    StatementSwitchToExpressionSwitch, UnqualifiedYield
    + Fixed issues:
  - InvalidParam warning on Javadoc for Java record components
    [#2321]
  - UnusedMethod flags @JsonValue methods as unused #3144
  - UnusedMethod: Add more JPA lifecycle annotations or make
    annotations configurable #3297
  - UnusedMethod: Support additional exempting method
    annotations #3428
  - Have InvalidParam support records #3437
  - Fix -XepDisableAllWarnings flag when passed on its own #3462
  - ASTHelpersSuggestions does not flag call to packge() on
    com.sun.tools.javac.code.Symbol.ClassSymbol #3482
  - @SupressWarnings on record compact constructor causes crash
    [#3494]
  * Changes of version 2.16.0:
    + New Checkers: ASTHelpersSuggestions,
    CanIgnoreReturnValueSuggester, LenientFormatStringValidation,
    UnnecessarilyUsedValue
    + Fixed issues:
  - Avoid using non-ASCII Unicode characters outside of comments
    and literals #3092
  - NullPointerException thrown during analysis #3220
  - NPE analysing new style switch statement (2.14.0) #3225
  - ImmutableChecker handles null types #3267
  - Drop pre-JDK 11 logic from Refaster's Inliner class #3441
  * Changes of version 2.15.0:
    + New Checkers: BuilderReturnThis,
    CanIgnoreReturnValueSuggester, CannotMockFinalClass,
    CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject,
    MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses,
    NullArgumentForNonNullParameter, SelfAlwaysReturnsThis,
    UnsafeWildcard, UnusedTypeParameter
  * Changes of version 2.14.0:
    + New checkers: BanJNDI,  EmptyTopLevelDeclaration,
    ErroneousBitwiseExpression,
    FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption,
    NullableOnContainingClass
  * Changes of version 2.13.1:
    + Fix a crash in UnnecessaryBoxedVariable
    + Include the unicode character in the diagnostic message
  * Changes of version 2.13.0:
    + Handle all annotations with the simple name Generated in
  - XepDisableWarningsInGeneratedCode
    + Reconcile BugChecker#isSuppressed with suppression handling in
    ErrorProneScanner
    + Fix a bug in enclosingPackage
    + Improve performance of fix application
    + Implicitly treat @AutoBuilder setter methods as
    @CanIgnoreReturnValue.
    + Remove some obsolete checks
    (PublicConstructorForAbstractClass, HashCodeToString)
  * Changes of version 2.12.1:
    + This release adds an infrastructure optimization to AppliedFix
    source code processing.
  * Changes of version 2.12.0:
    + New checks: BoxedPrimitiveEquality, DoubleBraceInitialization,
    IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod,
    LongDoubleConversion, RobolectricShadowDirectlyOn,
    StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion,
    Varifier</changelog>
</package>
<package pkgid="a7c795eca6fe76efcd51c6b1995c4d9b71d271fd37d1c4944afd771cde67b99e" name="google-errorprone-docgen_processor" arch="noarch">
  <version epoch="0" ver="2.26.1" rel="150200.5.6.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of some error_prone artifacts version 2.11.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="fstrba@suse.com" date="1713182400">- Upgrade to version 2.26.1
  * Changes of version 2.26.1:
    + Fixes the module name: from 'com.google.errorprone.annotation'
    to 'com.google.errorprone.annotations'. Amends the OSGi build
    not to include 'Automatic-Module-Name' in the MANIFEST.MF for the
    'annotations' project.
  * Changes of version 2.26.0:
    + The 'annotations' artifact now includes a module-info.java for
    Java Platform Module System support.
    + Disabled checks passed to -XepPatchChecks are now ignored,
    instead of causing a crash.
    + New checks:
  - SystemConsoleNull: Null-checking System.console() is not a
    reliable way to detect if the console is connected to a
    terminal.
  - EnumOrdinal: Discourage uses of Enum.ordinal()
    + Closed issues:
  - Add module-info.java #2649
  - 2.19.x: Exception thrown when a disabled check is passed to
  - XepPatchChecks #3908
  - Ignore disabled checks passed to -XepPatchChecks #4028
  - feat: add jpms definition for annotations #4311
  - Add the 'compile' goal for 'compile-java9' #4314
  * Changes of version 2.25.0:
    + New checks:
  - JUnitIncompatibleType: Detects incompatible types passed to
    an assertion, similar to TruthIncompatibleType
  - RedundantSetterCall: Detects fields set twice in the same
    chained expression. Generalization of previous
    ProtoRedundantSet check to also handle AutoValue.
    + Closed issues:
  - Crash in UnnecessaryStringBuilder #4195
  - Fix typos #4224
  - Add support for specifying badEnclosingTypes for BadImport
    via flags #4228
  - Some BugPattern docs are missing code examples #4248
  - Remove incorrect statement from BugPattern index doc #4249
  - Do not report NonFinalStaticField findings for fields
    modified in @BeforeAll methods #4251
  * Changes of version 2.24.1:
    + Add an assertion to try to help debug #4225
  * Changes of version 2.24.0:
    + New checks:
  - MultipleNullnessAnnotations: Discourage multiple nullness
    annotations
  - NullableTypeParameter: Discourage nullness annotations on
    type parameters
  - NullableWildcard: Discourage nullness annotations on
    wildcards
  - SuperCallToObjectMethod: Generalization of
    SuperEqualsIsObjectEquals, now covers hashCode
  * Changes of version 2.23.0:
    + New checks: DuplicateDateFormatField, NonFinalStaticField,
    StringCharset, StringFormatWithLiteral,
    SuperEqualsIsObjectEquals
    + Bug fixes and improvements: #3897, #4114, #4123
  * Changes of version 2.22.0:
    + New checks:
  - ClosingStandardOutputStreams: Prevents accidentally closing
    System.{out,err} with try-with-resources
  - TruthContainsExactlyElementsInUsage: containsExactly is
    preferred over containsExactlyElementsIn when creating new
    iterables
  - UnnecessaryAsync: detects unnecessary use of async
    primitives in local (and hence single-threaded) scopes
  - ReturnAtTheEndOfVoidFunction: detects unnecessary return
    statements at the end of void functions
  - MultimapKeys: Suggests using keySet() instead of iterating
    over Multimap.keys(), which does not collapse duplicates
    + Bug fixes and improvements:
  - Don't complain about literal IP addresses in
    AddressSelection
  - Prevent SuggestedFixes#renameMethod from modifying return
    type declaration
  - Fix UnusedVariable false positives for private record
    parameters
  - When running in conservative mode, no longer assume that
    implementations of Map.get, etc. return null
  - CanIgnoreReturnValueSuggester: Support additional exempting
    method annotations
  - UnusedVariable: exclude junit5's @RegisterExtension
  - Support running all available patch checks
  - Upgrade java-diff-utils 4.0 -&gt; 4.12
  - Flag unused Refaster template parameters
  - Support @SuppressWarnings("all")
  - Prevent Refaster UMemberSelect from matching method
    parameters
  - MissingDefault : Don't require // fall out comments on
    expression switches
  - Skip UnnecessaryLambda findings for usages in enhanced for
    loops
  - Fix bug where nested MissingBraces violations' suggested
    fixes result in broken code
  - Add support for specifying exemptPrefixes/exemptNames for
    UnusedVariable via flags
  - UnusedMethod: Added exempting variable annotations
  * Changes of version 2.21.1:
    + Handle overlapping ranges in suppressedRegions
    + Add AddressSelection to discourage APIs that convert a
    hostname to a single address
  * Changes of version 2.21.0:
    + New Checkers:
  - AttemptedNegativeZero: Prevents accidental use of -0, which
    is the same as 0. The floating-point negative zero is -0.0.
  - ICCProfileGetInstance: Warns on uses of
    ICC_Profile.getInstance(String), due to JDK-8191622.
  - MutableGuiceModule: Fields in Guice modules should be final.
  - NullableOptional: Discourages @Nullable-annotated Optionals.
  - OverridingMethodInconsistentArgumentNamesChecker: Arguments
    of overriding method are inconsistent with overridden
    method.
    + Fixed issues:
  - Avoid MemberName IOOBE on lambda parameters inside
    overriding methods #3976
  - Improve LockOnNonEnclosingClassLiteral documentation #3986
  - Security scan reported high CVE for
    com.google.guava:guava:31.1-jre #4001
  - Upgrade guava to 32.0.1 #4002
  - Proposal: checker to prevent other checkers from calling
    javac methods that changed across JDKs #4026
  - Add support in ASTHelpersSuggestions for getEnclosedElements
    [#4027]
  * Changes of version 2.20.0:
    + This release is compatible with early-access builds of JDK 21.
    + New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder,
    BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain,
    LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation,
    NamedLikeContextualKeyword, NonApiType
    + Fixes issues:
  - Introduce MissingRefasterAnnotation checker #2232
  - Fix minor typo in URepeated #2243
  - Drop unused constant Template#AUTOBOXING_DEFAULT #2997
  - Introduce command-line flag -XepAllSuggestionsAsWarnings
    [#3301]
  - JDK21 compatibility #3843
  - Add OSGi runtime metadata to error-prone's MANIFEST.MF files
    [#3903]
  - Use EISOP Checker Framework version 3.34.0-eisop1 #3918
  - NotJavadoc pattern does not allow Javadoc on module
    declarations #3923
  - ErrorProneInjector incorrectly picks up the no-args
    constructor #3931
  - Several high CVEs related to dependency
    com.google.protobuf:protobuf-java:3.19.2 #3945
  - Upgrade protobuf-java to 3.19.6 #3946
  * Changes of version 2.19.1:
    + This release fixes a binary compatibility issue when running
    on JDK 11
  * Changes of version 2.19.0:
    + New Checkers: NotJavadoc, StringCaseLocaleUsage,
    UnnecessaryTestMethodPrefix
    + Fixes issues:
  - Exclude inner classes annotated with @Nested from
    ClassCanBeStatic rule #956
  - Optimize VisitorState#getSymbolFromName #3504
  - ClassCanBeStatic: Exclude JUnit @Nested classes #3654
  - BadImport: flag static import of newInstance methods #3703
  - Support given for enforcing DirectInvocationOnMock: issue
    3396 #3731
  - Handle yield statement case in ASTHelpers#targetType #3737
  - Should ASTHelpers.getSymbol(Tree) be annotated with
    @Nullable? #3760
  - Fix '@' character in javadoc code snippets #3779
  - Replace guava cache with caffeine #3796
  - Discourage APIs locale-dependent APIs like
    String.to{Lower,Upper}Case #3809
  - Introduce StringCaseLocaleUsage check #3813
  * Changes of version 2.18.0:
    + New Checkers: InjectOnBugCheckers, LabelledBreakTarget,
    UnusedLabel, YodaCondition
    + Fixes issues:
  - @SuppressWarnings("InlineFormatString") doesn't work #1650
  - Refaster: support method invocation type argument inlining
    [#2706]
  - java.lang.IllegalArgumentException: Cannot edit synthetic
    AST nodes with specific record constructor #3404
  - Rename class to match filename #3493
  - Optimize VisitorState#getSymbolFromName #3504
  - refactor: refactor bad smell UnusedLabel #3519
  - LambdaFunctionalInterface crash with
    IllegalArgumentException when processing an enum constructor
    taking a lambda #3579
  - Fix JDK 20-ea build compatibility #3610
  - UngroupedOverloads: ignore generated constructors #3632
  - [errorprone 2.17.0] NPE in
    StatementSwitchToExpressionSwitch.analyzeSwitchTree #3638
  - StatementSwitchToExpressionSwitch: handle empty statement
    blocks #3645
  - StatementSwitchToExpressionSwitch: only trigger on
    compatible target versions #3646
  - Fix Finalize bugpattern to match protected finalize() #3652
  - Make MemoizeConstantVisitorStateLookups check suppressible
    [#3690]
  * Changes of version 2.17.0:
    + New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter,
    ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem,
    StatementSwitchToExpressionSwitch, UnqualifiedYield
    + Fixed issues:
  - InvalidParam warning on Javadoc for Java record components
    [#2321]
  - UnusedMethod flags @JsonValue methods as unused #3144
  - UnusedMethod: Add more JPA lifecycle annotations or make
    annotations configurable #3297
  - UnusedMethod: Support additional exempting method
    annotations #3428
  - Have InvalidParam support records #3437
  - Fix -XepDisableAllWarnings flag when passed on its own #3462
  - ASTHelpersSuggestions does not flag call to packge() on
    com.sun.tools.javac.code.Symbol.ClassSymbol #3482
  - @SupressWarnings on record compact constructor causes crash
    [#3494]
  * Changes of version 2.16.0:
    + New Checkers: ASTHelpersSuggestions,
    CanIgnoreReturnValueSuggester, LenientFormatStringValidation,
    UnnecessarilyUsedValue
    + Fixed issues:
  - Avoid using non-ASCII Unicode characters outside of comments
    and literals #3092
  - NullPointerException thrown during analysis #3220
  - NPE analysing new style switch statement (2.14.0) #3225
  - ImmutableChecker handles null types #3267
  - Drop pre-JDK 11 logic from Refaster's Inliner class #3441
  * Changes of version 2.15.0:
    + New Checkers: BuilderReturnThis,
    CanIgnoreReturnValueSuggester, CannotMockFinalClass,
    CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject,
    MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses,
    NullArgumentForNonNullParameter, SelfAlwaysReturnsThis,
    UnsafeWildcard, UnusedTypeParameter
  * Changes of version 2.14.0:
    + New checkers: BanJNDI,  EmptyTopLevelDeclaration,
    ErroneousBitwiseExpression,
    FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption,
    NullableOnContainingClass
  * Changes of version 2.13.1:
    + Fix a crash in UnnecessaryBoxedVariable
    + Include the unicode character in the diagnostic message
  * Changes of version 2.13.0:
    + Handle all annotations with the simple name Generated in
  - XepDisableWarningsInGeneratedCode
    + Reconcile BugChecker#isSuppressed with suppression handling in
    ErrorProneScanner
    + Fix a bug in enclosingPackage
    + Improve performance of fix application
    + Implicitly treat @AutoBuilder setter methods as
    @CanIgnoreReturnValue.
    + Remove some obsolete checks
    (PublicConstructorForAbstractClass, HashCodeToString)
  * Changes of version 2.12.1:
    + This release adds an infrastructure optimization to AppliedFix
    source code processing.
  * Changes of version 2.12.0:
    + New checks: BoxedPrimitiveEquality, DoubleBraceInitialization,
    IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod,
    LongDoubleConversion, RobolectricShadowDirectlyOn,
    StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion,
    Varifier</changelog>
</package>
<package pkgid="1ba7c041bca7b635fe4257ea407533c9daab69129e5c8a7b451e30e8f2dfc748" name="google-errorprone-javadoc" arch="noarch">
  <version epoch="0" ver="2.26.1" rel="150200.5.6.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of some error_prone artifacts version 2.11.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="fstrba@suse.com" date="1713182400">- Upgrade to version 2.26.1
  * Changes of version 2.26.1:
    + Fixes the module name: from 'com.google.errorprone.annotation'
    to 'com.google.errorprone.annotations'. Amends the OSGi build
    not to include 'Automatic-Module-Name' in the MANIFEST.MF for the
    'annotations' project.
  * Changes of version 2.26.0:
    + The 'annotations' artifact now includes a module-info.java for
    Java Platform Module System support.
    + Disabled checks passed to -XepPatchChecks are now ignored,
    instead of causing a crash.
    + New checks:
  - SystemConsoleNull: Null-checking System.console() is not a
    reliable way to detect if the console is connected to a
    terminal.
  - EnumOrdinal: Discourage uses of Enum.ordinal()
    + Closed issues:
  - Add module-info.java #2649
  - 2.19.x: Exception thrown when a disabled check is passed to
  - XepPatchChecks #3908
  - Ignore disabled checks passed to -XepPatchChecks #4028
  - feat: add jpms definition for annotations #4311
  - Add the 'compile' goal for 'compile-java9' #4314
  * Changes of version 2.25.0:
    + New checks:
  - JUnitIncompatibleType: Detects incompatible types passed to
    an assertion, similar to TruthIncompatibleType
  - RedundantSetterCall: Detects fields set twice in the same
    chained expression. Generalization of previous
    ProtoRedundantSet check to also handle AutoValue.
    + Closed issues:
  - Crash in UnnecessaryStringBuilder #4195
  - Fix typos #4224
  - Add support for specifying badEnclosingTypes for BadImport
    via flags #4228
  - Some BugPattern docs are missing code examples #4248
  - Remove incorrect statement from BugPattern index doc #4249
  - Do not report NonFinalStaticField findings for fields
    modified in @BeforeAll methods #4251
  * Changes of version 2.24.1:
    + Add an assertion to try to help debug #4225
  * Changes of version 2.24.0:
    + New checks:
  - MultipleNullnessAnnotations: Discourage multiple nullness
    annotations
  - NullableTypeParameter: Discourage nullness annotations on
    type parameters
  - NullableWildcard: Discourage nullness annotations on
    wildcards
  - SuperCallToObjectMethod: Generalization of
    SuperEqualsIsObjectEquals, now covers hashCode
  * Changes of version 2.23.0:
    + New checks: DuplicateDateFormatField, NonFinalStaticField,
    StringCharset, StringFormatWithLiteral,
    SuperEqualsIsObjectEquals
    + Bug fixes and improvements: #3897, #4114, #4123
  * Changes of version 2.22.0:
    + New checks:
  - ClosingStandardOutputStreams: Prevents accidentally closing
    System.{out,err} with try-with-resources
  - TruthContainsExactlyElementsInUsage: containsExactly is
    preferred over containsExactlyElementsIn when creating new
    iterables
  - UnnecessaryAsync: detects unnecessary use of async
    primitives in local (and hence single-threaded) scopes
  - ReturnAtTheEndOfVoidFunction: detects unnecessary return
    statements at the end of void functions
  - MultimapKeys: Suggests using keySet() instead of iterating
    over Multimap.keys(), which does not collapse duplicates
    + Bug fixes and improvements:
  - Don't complain about literal IP addresses in
    AddressSelection
  - Prevent SuggestedFixes#renameMethod from modifying return
    type declaration
  - Fix UnusedVariable false positives for private record
    parameters
  - When running in conservative mode, no longer assume that
    implementations of Map.get, etc. return null
  - CanIgnoreReturnValueSuggester: Support additional exempting
    method annotations
  - UnusedVariable: exclude junit5's @RegisterExtension
  - Support running all available patch checks
  - Upgrade java-diff-utils 4.0 -&gt; 4.12
  - Flag unused Refaster template parameters
  - Support @SuppressWarnings("all")
  - Prevent Refaster UMemberSelect from matching method
    parameters
  - MissingDefault : Don't require // fall out comments on
    expression switches
  - Skip UnnecessaryLambda findings for usages in enhanced for
    loops
  - Fix bug where nested MissingBraces violations' suggested
    fixes result in broken code
  - Add support for specifying exemptPrefixes/exemptNames for
    UnusedVariable via flags
  - UnusedMethod: Added exempting variable annotations
  * Changes of version 2.21.1:
    + Handle overlapping ranges in suppressedRegions
    + Add AddressSelection to discourage APIs that convert a
    hostname to a single address
  * Changes of version 2.21.0:
    + New Checkers:
  - AttemptedNegativeZero: Prevents accidental use of -0, which
    is the same as 0. The floating-point negative zero is -0.0.
  - ICCProfileGetInstance: Warns on uses of
    ICC_Profile.getInstance(String), due to JDK-8191622.
  - MutableGuiceModule: Fields in Guice modules should be final.
  - NullableOptional: Discourages @Nullable-annotated Optionals.
  - OverridingMethodInconsistentArgumentNamesChecker: Arguments
    of overriding method are inconsistent with overridden
    method.
    + Fixed issues:
  - Avoid MemberName IOOBE on lambda parameters inside
    overriding methods #3976
  - Improve LockOnNonEnclosingClassLiteral documentation #3986
  - Security scan reported high CVE for
    com.google.guava:guava:31.1-jre #4001
  - Upgrade guava to 32.0.1 #4002
  - Proposal: checker to prevent other checkers from calling
    javac methods that changed across JDKs #4026
  - Add support in ASTHelpersSuggestions for getEnclosedElements
    [#4027]
  * Changes of version 2.20.0:
    + This release is compatible with early-access builds of JDK 21.
    + New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder,
    BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain,
    LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation,
    NamedLikeContextualKeyword, NonApiType
    + Fixes issues:
  - Introduce MissingRefasterAnnotation checker #2232
  - Fix minor typo in URepeated #2243
  - Drop unused constant Template#AUTOBOXING_DEFAULT #2997
  - Introduce command-line flag -XepAllSuggestionsAsWarnings
    [#3301]
  - JDK21 compatibility #3843
  - Add OSGi runtime metadata to error-prone's MANIFEST.MF files
    [#3903]
  - Use EISOP Checker Framework version 3.34.0-eisop1 #3918
  - NotJavadoc pattern does not allow Javadoc on module
    declarations #3923
  - ErrorProneInjector incorrectly picks up the no-args
    constructor #3931
  - Several high CVEs related to dependency
    com.google.protobuf:protobuf-java:3.19.2 #3945
  - Upgrade protobuf-java to 3.19.6 #3946
  * Changes of version 2.19.1:
    + This release fixes a binary compatibility issue when running
    on JDK 11
  * Changes of version 2.19.0:
    + New Checkers: NotJavadoc, StringCaseLocaleUsage,
    UnnecessaryTestMethodPrefix
    + Fixes issues:
  - Exclude inner classes annotated with @Nested from
    ClassCanBeStatic rule #956
  - Optimize VisitorState#getSymbolFromName #3504
  - ClassCanBeStatic: Exclude JUnit @Nested classes #3654
  - BadImport: flag static import of newInstance methods #3703
  - Support given for enforcing DirectInvocationOnMock: issue
    3396 #3731
  - Handle yield statement case in ASTHelpers#targetType #3737
  - Should ASTHelpers.getSymbol(Tree) be annotated with
    @Nullable? #3760
  - Fix '@' character in javadoc code snippets #3779
  - Replace guava cache with caffeine #3796
  - Discourage APIs locale-dependent APIs like
    String.to{Lower,Upper}Case #3809
  - Introduce StringCaseLocaleUsage check #3813
  * Changes of version 2.18.0:
    + New Checkers: InjectOnBugCheckers, LabelledBreakTarget,
    UnusedLabel, YodaCondition
    + Fixes issues:
  - @SuppressWarnings("InlineFormatString") doesn't work #1650
  - Refaster: support method invocation type argument inlining
    [#2706]
  - java.lang.IllegalArgumentException: Cannot edit synthetic
    AST nodes with specific record constructor #3404
  - Rename class to match filename #3493
  - Optimize VisitorState#getSymbolFromName #3504
  - refactor: refactor bad smell UnusedLabel #3519
  - LambdaFunctionalInterface crash with
    IllegalArgumentException when processing an enum constructor
    taking a lambda #3579
  - Fix JDK 20-ea build compatibility #3610
  - UngroupedOverloads: ignore generated constructors #3632
  - [errorprone 2.17.0] NPE in
    StatementSwitchToExpressionSwitch.analyzeSwitchTree #3638
  - StatementSwitchToExpressionSwitch: handle empty statement
    blocks #3645
  - StatementSwitchToExpressionSwitch: only trigger on
    compatible target versions #3646
  - Fix Finalize bugpattern to match protected finalize() #3652
  - Make MemoizeConstantVisitorStateLookups check suppressible
    [#3690]
  * Changes of version 2.17.0:
    + New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter,
    ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem,
    StatementSwitchToExpressionSwitch, UnqualifiedYield
    + Fixed issues:
  - InvalidParam warning on Javadoc for Java record components
    [#2321]
  - UnusedMethod flags @JsonValue methods as unused #3144
  - UnusedMethod: Add more JPA lifecycle annotations or make
    annotations configurable #3297
  - UnusedMethod: Support additional exempting method
    annotations #3428
  - Have InvalidParam support records #3437
  - Fix -XepDisableAllWarnings flag when passed on its own #3462
  - ASTHelpersSuggestions does not flag call to packge() on
    com.sun.tools.javac.code.Symbol.ClassSymbol #3482
  - @SupressWarnings on record compact constructor causes crash
    [#3494]
  * Changes of version 2.16.0:
    + New Checkers: ASTHelpersSuggestions,
    CanIgnoreReturnValueSuggester, LenientFormatStringValidation,
    UnnecessarilyUsedValue
    + Fixed issues:
  - Avoid using non-ASCII Unicode characters outside of comments
    and literals #3092
  - NullPointerException thrown during analysis #3220
  - NPE analysing new style switch statement (2.14.0) #3225
  - ImmutableChecker handles null types #3267
  - Drop pre-JDK 11 logic from Refaster's Inliner class #3441
  * Changes of version 2.15.0:
    + New Checkers: BuilderReturnThis,
    CanIgnoreReturnValueSuggester, CannotMockFinalClass,
    CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject,
    MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses,
    NullArgumentForNonNullParameter, SelfAlwaysReturnsThis,
    UnsafeWildcard, UnusedTypeParameter
  * Changes of version 2.14.0:
    + New checkers: BanJNDI,  EmptyTopLevelDeclaration,
    ErroneousBitwiseExpression,
    FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption,
    NullableOnContainingClass
  * Changes of version 2.13.1:
    + Fix a crash in UnnecessaryBoxedVariable
    + Include the unicode character in the diagnostic message
  * Changes of version 2.13.0:
    + Handle all annotations with the simple name Generated in
  - XepDisableWarningsInGeneratedCode
    + Reconcile BugChecker#isSuppressed with suppression handling in
    ErrorProneScanner
    + Fix a bug in enclosingPackage
    + Improve performance of fix application
    + Implicitly treat @AutoBuilder setter methods as
    @CanIgnoreReturnValue.
    + Remove some obsolete checks
    (PublicConstructorForAbstractClass, HashCodeToString)
  * Changes of version 2.12.1:
    + This release adds an infrastructure optimization to AppliedFix
    source code processing.
  * Changes of version 2.12.0:
    + New checks: BoxedPrimitiveEquality, DoubleBraceInitialization,
    IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod,
    LongDoubleConversion, RobolectricShadowDirectlyOn,
    StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion,
    Varifier</changelog>
</package>
<package pkgid="26f8b23496033e134428ac5e3cf25cde2f5097926f53b09578c02002c826f04d" name="google-errorprone-parent" arch="noarch">
  <version epoch="0" ver="2.26.1" rel="150200.5.6.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of some error_prone artifacts version 2.11.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="fstrba@suse.com" date="1713182400">- Upgrade to version 2.26.1
  * Changes of version 2.26.1:
    + Fixes the module name: from 'com.google.errorprone.annotation'
    to 'com.google.errorprone.annotations'. Amends the OSGi build
    not to include 'Automatic-Module-Name' in the MANIFEST.MF for the
    'annotations' project.
  * Changes of version 2.26.0:
    + The 'annotations' artifact now includes a module-info.java for
    Java Platform Module System support.
    + Disabled checks passed to -XepPatchChecks are now ignored,
    instead of causing a crash.
    + New checks:
  - SystemConsoleNull: Null-checking System.console() is not a
    reliable way to detect if the console is connected to a
    terminal.
  - EnumOrdinal: Discourage uses of Enum.ordinal()
    + Closed issues:
  - Add module-info.java #2649
  - 2.19.x: Exception thrown when a disabled check is passed to
  - XepPatchChecks #3908
  - Ignore disabled checks passed to -XepPatchChecks #4028
  - feat: add jpms definition for annotations #4311
  - Add the 'compile' goal for 'compile-java9' #4314
  * Changes of version 2.25.0:
    + New checks:
  - JUnitIncompatibleType: Detects incompatible types passed to
    an assertion, similar to TruthIncompatibleType
  - RedundantSetterCall: Detects fields set twice in the same
    chained expression. Generalization of previous
    ProtoRedundantSet check to also handle AutoValue.
    + Closed issues:
  - Crash in UnnecessaryStringBuilder #4195
  - Fix typos #4224
  - Add support for specifying badEnclosingTypes for BadImport
    via flags #4228
  - Some BugPattern docs are missing code examples #4248
  - Remove incorrect statement from BugPattern index doc #4249
  - Do not report NonFinalStaticField findings for fields
    modified in @BeforeAll methods #4251
  * Changes of version 2.24.1:
    + Add an assertion to try to help debug #4225
  * Changes of version 2.24.0:
    + New checks:
  - MultipleNullnessAnnotations: Discourage multiple nullness
    annotations
  - NullableTypeParameter: Discourage nullness annotations on
    type parameters
  - NullableWildcard: Discourage nullness annotations on
    wildcards
  - SuperCallToObjectMethod: Generalization of
    SuperEqualsIsObjectEquals, now covers hashCode
  * Changes of version 2.23.0:
    + New checks: DuplicateDateFormatField, NonFinalStaticField,
    StringCharset, StringFormatWithLiteral,
    SuperEqualsIsObjectEquals
    + Bug fixes and improvements: #3897, #4114, #4123
  * Changes of version 2.22.0:
    + New checks:
  - ClosingStandardOutputStreams: Prevents accidentally closing
    System.{out,err} with try-with-resources
  - TruthContainsExactlyElementsInUsage: containsExactly is
    preferred over containsExactlyElementsIn when creating new
    iterables
  - UnnecessaryAsync: detects unnecessary use of async
    primitives in local (and hence single-threaded) scopes
  - ReturnAtTheEndOfVoidFunction: detects unnecessary return
    statements at the end of void functions
  - MultimapKeys: Suggests using keySet() instead of iterating
    over Multimap.keys(), which does not collapse duplicates
    + Bug fixes and improvements:
  - Don't complain about literal IP addresses in
    AddressSelection
  - Prevent SuggestedFixes#renameMethod from modifying return
    type declaration
  - Fix UnusedVariable false positives for private record
    parameters
  - When running in conservative mode, no longer assume that
    implementations of Map.get, etc. return null
  - CanIgnoreReturnValueSuggester: Support additional exempting
    method annotations
  - UnusedVariable: exclude junit5's @RegisterExtension
  - Support running all available patch checks
  - Upgrade java-diff-utils 4.0 -&gt; 4.12
  - Flag unused Refaster template parameters
  - Support @SuppressWarnings("all")
  - Prevent Refaster UMemberSelect from matching method
    parameters
  - MissingDefault : Don't require // fall out comments on
    expression switches
  - Skip UnnecessaryLambda findings for usages in enhanced for
    loops
  - Fix bug where nested MissingBraces violations' suggested
    fixes result in broken code
  - Add support for specifying exemptPrefixes/exemptNames for
    UnusedVariable via flags
  - UnusedMethod: Added exempting variable annotations
  * Changes of version 2.21.1:
    + Handle overlapping ranges in suppressedRegions
    + Add AddressSelection to discourage APIs that convert a
    hostname to a single address
  * Changes of version 2.21.0:
    + New Checkers:
  - AttemptedNegativeZero: Prevents accidental use of -0, which
    is the same as 0. The floating-point negative zero is -0.0.
  - ICCProfileGetInstance: Warns on uses of
    ICC_Profile.getInstance(String), due to JDK-8191622.
  - MutableGuiceModule: Fields in Guice modules should be final.
  - NullableOptional: Discourages @Nullable-annotated Optionals.
  - OverridingMethodInconsistentArgumentNamesChecker: Arguments
    of overriding method are inconsistent with overridden
    method.
    + Fixed issues:
  - Avoid MemberName IOOBE on lambda parameters inside
    overriding methods #3976
  - Improve LockOnNonEnclosingClassLiteral documentation #3986
  - Security scan reported high CVE for
    com.google.guava:guava:31.1-jre #4001
  - Upgrade guava to 32.0.1 #4002
  - Proposal: checker to prevent other checkers from calling
    javac methods that changed across JDKs #4026
  - Add support in ASTHelpersSuggestions for getEnclosedElements
    [#4027]
  * Changes of version 2.20.0:
    + This release is compatible with early-access builds of JDK 21.
    + New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder,
    BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain,
    LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation,
    NamedLikeContextualKeyword, NonApiType
    + Fixes issues:
  - Introduce MissingRefasterAnnotation checker #2232
  - Fix minor typo in URepeated #2243
  - Drop unused constant Template#AUTOBOXING_DEFAULT #2997
  - Introduce command-line flag -XepAllSuggestionsAsWarnings
    [#3301]
  - JDK21 compatibility #3843
  - Add OSGi runtime metadata to error-prone's MANIFEST.MF files
    [#3903]
  - Use EISOP Checker Framework version 3.34.0-eisop1 #3918
  - NotJavadoc pattern does not allow Javadoc on module
    declarations #3923
  - ErrorProneInjector incorrectly picks up the no-args
    constructor #3931
  - Several high CVEs related to dependency
    com.google.protobuf:protobuf-java:3.19.2 #3945
  - Upgrade protobuf-java to 3.19.6 #3946
  * Changes of version 2.19.1:
    + This release fixes a binary compatibility issue when running
    on JDK 11
  * Changes of version 2.19.0:
    + New Checkers: NotJavadoc, StringCaseLocaleUsage,
    UnnecessaryTestMethodPrefix
    + Fixes issues:
  - Exclude inner classes annotated with @Nested from
    ClassCanBeStatic rule #956
  - Optimize VisitorState#getSymbolFromName #3504
  - ClassCanBeStatic: Exclude JUnit @Nested classes #3654
  - BadImport: flag static import of newInstance methods #3703
  - Support given for enforcing DirectInvocationOnMock: issue
    3396 #3731
  - Handle yield statement case in ASTHelpers#targetType #3737
  - Should ASTHelpers.getSymbol(Tree) be annotated with
    @Nullable? #3760
  - Fix '@' character in javadoc code snippets #3779
  - Replace guava cache with caffeine #3796
  - Discourage APIs locale-dependent APIs like
    String.to{Lower,Upper}Case #3809
  - Introduce StringCaseLocaleUsage check #3813
  * Changes of version 2.18.0:
    + New Checkers: InjectOnBugCheckers, LabelledBreakTarget,
    UnusedLabel, YodaCondition
    + Fixes issues:
  - @SuppressWarnings("InlineFormatString") doesn't work #1650
  - Refaster: support method invocation type argument inlining
    [#2706]
  - java.lang.IllegalArgumentException: Cannot edit synthetic
    AST nodes with specific record constructor #3404
  - Rename class to match filename #3493
  - Optimize VisitorState#getSymbolFromName #3504
  - refactor: refactor bad smell UnusedLabel #3519
  - LambdaFunctionalInterface crash with
    IllegalArgumentException when processing an enum constructor
    taking a lambda #3579
  - Fix JDK 20-ea build compatibility #3610
  - UngroupedOverloads: ignore generated constructors #3632
  - [errorprone 2.17.0] NPE in
    StatementSwitchToExpressionSwitch.analyzeSwitchTree #3638
  - StatementSwitchToExpressionSwitch: handle empty statement
    blocks #3645
  - StatementSwitchToExpressionSwitch: only trigger on
    compatible target versions #3646
  - Fix Finalize bugpattern to match protected finalize() #3652
  - Make MemoizeConstantVisitorStateLookups check suppressible
    [#3690]
  * Changes of version 2.17.0:
    + New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter,
    ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem,
    StatementSwitchToExpressionSwitch, UnqualifiedYield
    + Fixed issues:
  - InvalidParam warning on Javadoc for Java record components
    [#2321]
  - UnusedMethod flags @JsonValue methods as unused #3144
  - UnusedMethod: Add more JPA lifecycle annotations or make
    annotations configurable #3297
  - UnusedMethod: Support additional exempting method
    annotations #3428
  - Have InvalidParam support records #3437
  - Fix -XepDisableAllWarnings flag when passed on its own #3462
  - ASTHelpersSuggestions does not flag call to packge() on
    com.sun.tools.javac.code.Symbol.ClassSymbol #3482
  - @SupressWarnings on record compact constructor causes crash
    [#3494]
  * Changes of version 2.16.0:
    + New Checkers: ASTHelpersSuggestions,
    CanIgnoreReturnValueSuggester, LenientFormatStringValidation,
    UnnecessarilyUsedValue
    + Fixed issues:
  - Avoid using non-ASCII Unicode characters outside of comments
    and literals #3092
  - NullPointerException thrown during analysis #3220
  - NPE analysing new style switch statement (2.14.0) #3225
  - ImmutableChecker handles null types #3267
  - Drop pre-JDK 11 logic from Refaster's Inliner class #3441
  * Changes of version 2.15.0:
    + New Checkers: BuilderReturnThis,
    CanIgnoreReturnValueSuggester, CannotMockFinalClass,
    CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject,
    MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses,
    NullArgumentForNonNullParameter, SelfAlwaysReturnsThis,
    UnsafeWildcard, UnusedTypeParameter
  * Changes of version 2.14.0:
    + New checkers: BanJNDI,  EmptyTopLevelDeclaration,
    ErroneousBitwiseExpression,
    FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption,
    NullableOnContainingClass
  * Changes of version 2.13.1:
    + Fix a crash in UnnecessaryBoxedVariable
    + Include the unicode character in the diagnostic message
  * Changes of version 2.13.0:
    + Handle all annotations with the simple name Generated in
  - XepDisableWarningsInGeneratedCode
    + Reconcile BugChecker#isSuppressed with suppression handling in
    ErrorProneScanner
    + Fix a bug in enclosingPackage
    + Improve performance of fix application
    + Implicitly treat @AutoBuilder setter methods as
    @CanIgnoreReturnValue.
    + Remove some obsolete checks
    (PublicConstructorForAbstractClass, HashCodeToString)
  * Changes of version 2.12.1:
    + This release adds an infrastructure optimization to AppliedFix
    source code processing.
  * Changes of version 2.12.0:
    + New checks: BoxedPrimitiveEquality, DoubleBraceInitialization,
    IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod,
    LongDoubleConversion, RobolectricShadowDirectlyOn,
    StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion,
    Varifier</changelog>
</package>
<package pkgid="c4a6085bee59e69bca5e3619ffe4c584032a28cf1cc09123a918540b52d8e418" name="google-errorprone-type_annotations" arch="noarch">
  <version epoch="0" ver="2.26.1" rel="150200.5.6.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of some error_prone artifacts version 2.11.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="fstrba@suse.com" date="1713182400">- Upgrade to version 2.26.1
  * Changes of version 2.26.1:
    + Fixes the module name: from 'com.google.errorprone.annotation'
    to 'com.google.errorprone.annotations'. Amends the OSGi build
    not to include 'Automatic-Module-Name' in the MANIFEST.MF for the
    'annotations' project.
  * Changes of version 2.26.0:
    + The 'annotations' artifact now includes a module-info.java for
    Java Platform Module System support.
    + Disabled checks passed to -XepPatchChecks are now ignored,
    instead of causing a crash.
    + New checks:
  - SystemConsoleNull: Null-checking System.console() is not a
    reliable way to detect if the console is connected to a
    terminal.
  - EnumOrdinal: Discourage uses of Enum.ordinal()
    + Closed issues:
  - Add module-info.java #2649
  - 2.19.x: Exception thrown when a disabled check is passed to
  - XepPatchChecks #3908
  - Ignore disabled checks passed to -XepPatchChecks #4028
  - feat: add jpms definition for annotations #4311
  - Add the 'compile' goal for 'compile-java9' #4314
  * Changes of version 2.25.0:
    + New checks:
  - JUnitIncompatibleType: Detects incompatible types passed to
    an assertion, similar to TruthIncompatibleType
  - RedundantSetterCall: Detects fields set twice in the same
    chained expression. Generalization of previous
    ProtoRedundantSet check to also handle AutoValue.
    + Closed issues:
  - Crash in UnnecessaryStringBuilder #4195
  - Fix typos #4224
  - Add support for specifying badEnclosingTypes for BadImport
    via flags #4228
  - Some BugPattern docs are missing code examples #4248
  - Remove incorrect statement from BugPattern index doc #4249
  - Do not report NonFinalStaticField findings for fields
    modified in @BeforeAll methods #4251
  * Changes of version 2.24.1:
    + Add an assertion to try to help debug #4225
  * Changes of version 2.24.0:
    + New checks:
  - MultipleNullnessAnnotations: Discourage multiple nullness
    annotations
  - NullableTypeParameter: Discourage nullness annotations on
    type parameters
  - NullableWildcard: Discourage nullness annotations on
    wildcards
  - SuperCallToObjectMethod: Generalization of
    SuperEqualsIsObjectEquals, now covers hashCode
  * Changes of version 2.23.0:
    + New checks: DuplicateDateFormatField, NonFinalStaticField,
    StringCharset, StringFormatWithLiteral,
    SuperEqualsIsObjectEquals
    + Bug fixes and improvements: #3897, #4114, #4123
  * Changes of version 2.22.0:
    + New checks:
  - ClosingStandardOutputStreams: Prevents accidentally closing
    System.{out,err} with try-with-resources
  - TruthContainsExactlyElementsInUsage: containsExactly is
    preferred over containsExactlyElementsIn when creating new
    iterables
  - UnnecessaryAsync: detects unnecessary use of async
    primitives in local (and hence single-threaded) scopes
  - ReturnAtTheEndOfVoidFunction: detects unnecessary return
    statements at the end of void functions
  - MultimapKeys: Suggests using keySet() instead of iterating
    over Multimap.keys(), which does not collapse duplicates
    + Bug fixes and improvements:
  - Don't complain about literal IP addresses in
    AddressSelection
  - Prevent SuggestedFixes#renameMethod from modifying return
    type declaration
  - Fix UnusedVariable false positives for private record
    parameters
  - When running in conservative mode, no longer assume that
    implementations of Map.get, etc. return null
  - CanIgnoreReturnValueSuggester: Support additional exempting
    method annotations
  - UnusedVariable: exclude junit5's @RegisterExtension
  - Support running all available patch checks
  - Upgrade java-diff-utils 4.0 -&gt; 4.12
  - Flag unused Refaster template parameters
  - Support @SuppressWarnings("all")
  - Prevent Refaster UMemberSelect from matching method
    parameters
  - MissingDefault : Don't require // fall out comments on
    expression switches
  - Skip UnnecessaryLambda findings for usages in enhanced for
    loops
  - Fix bug where nested MissingBraces violations' suggested
    fixes result in broken code
  - Add support for specifying exemptPrefixes/exemptNames for
    UnusedVariable via flags
  - UnusedMethod: Added exempting variable annotations
  * Changes of version 2.21.1:
    + Handle overlapping ranges in suppressedRegions
    + Add AddressSelection to discourage APIs that convert a
    hostname to a single address
  * Changes of version 2.21.0:
    + New Checkers:
  - AttemptedNegativeZero: Prevents accidental use of -0, which
    is the same as 0. The floating-point negative zero is -0.0.
  - ICCProfileGetInstance: Warns on uses of
    ICC_Profile.getInstance(String), due to JDK-8191622.
  - MutableGuiceModule: Fields in Guice modules should be final.
  - NullableOptional: Discourages @Nullable-annotated Optionals.
  - OverridingMethodInconsistentArgumentNamesChecker: Arguments
    of overriding method are inconsistent with overridden
    method.
    + Fixed issues:
  - Avoid MemberName IOOBE on lambda parameters inside
    overriding methods #3976
  - Improve LockOnNonEnclosingClassLiteral documentation #3986
  - Security scan reported high CVE for
    com.google.guava:guava:31.1-jre #4001
  - Upgrade guava to 32.0.1 #4002
  - Proposal: checker to prevent other checkers from calling
    javac methods that changed across JDKs #4026
  - Add support in ASTHelpersSuggestions for getEnclosedElements
    [#4027]
  * Changes of version 2.20.0:
    + This release is compatible with early-access builds of JDK 21.
    + New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder,
    BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain,
    LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation,
    NamedLikeContextualKeyword, NonApiType
    + Fixes issues:
  - Introduce MissingRefasterAnnotation checker #2232
  - Fix minor typo in URepeated #2243
  - Drop unused constant Template#AUTOBOXING_DEFAULT #2997
  - Introduce command-line flag -XepAllSuggestionsAsWarnings
    [#3301]
  - JDK21 compatibility #3843
  - Add OSGi runtime metadata to error-prone's MANIFEST.MF files
    [#3903]
  - Use EISOP Checker Framework version 3.34.0-eisop1 #3918
  - NotJavadoc pattern does not allow Javadoc on module
    declarations #3923
  - ErrorProneInjector incorrectly picks up the no-args
    constructor #3931
  - Several high CVEs related to dependency
    com.google.protobuf:protobuf-java:3.19.2 #3945
  - Upgrade protobuf-java to 3.19.6 #3946
  * Changes of version 2.19.1:
    + This release fixes a binary compatibility issue when running
    on JDK 11
  * Changes of version 2.19.0:
    + New Checkers: NotJavadoc, StringCaseLocaleUsage,
    UnnecessaryTestMethodPrefix
    + Fixes issues:
  - Exclude inner classes annotated with @Nested from
    ClassCanBeStatic rule #956
  - Optimize VisitorState#getSymbolFromName #3504
  - ClassCanBeStatic: Exclude JUnit @Nested classes #3654
  - BadImport: flag static import of newInstance methods #3703
  - Support given for enforcing DirectInvocationOnMock: issue
    3396 #3731
  - Handle yield statement case in ASTHelpers#targetType #3737
  - Should ASTHelpers.getSymbol(Tree) be annotated with
    @Nullable? #3760
  - Fix '@' character in javadoc code snippets #3779
  - Replace guava cache with caffeine #3796
  - Discourage APIs locale-dependent APIs like
    String.to{Lower,Upper}Case #3809
  - Introduce StringCaseLocaleUsage check #3813
  * Changes of version 2.18.0:
    + New Checkers: InjectOnBugCheckers, LabelledBreakTarget,
    UnusedLabel, YodaCondition
    + Fixes issues:
  - @SuppressWarnings("InlineFormatString") doesn't work #1650
  - Refaster: support method invocation type argument inlining
    [#2706]
  - java.lang.IllegalArgumentException: Cannot edit synthetic
    AST nodes with specific record constructor #3404
  - Rename class to match filename #3493
  - Optimize VisitorState#getSymbolFromName #3504
  - refactor: refactor bad smell UnusedLabel #3519
  - LambdaFunctionalInterface crash with
    IllegalArgumentException when processing an enum constructor
    taking a lambda #3579
  - Fix JDK 20-ea build compatibility #3610
  - UngroupedOverloads: ignore generated constructors #3632
  - [errorprone 2.17.0] NPE in
    StatementSwitchToExpressionSwitch.analyzeSwitchTree #3638
  - StatementSwitchToExpressionSwitch: handle empty statement
    blocks #3645
  - StatementSwitchToExpressionSwitch: only trigger on
    compatible target versions #3646
  - Fix Finalize bugpattern to match protected finalize() #3652
  - Make MemoizeConstantVisitorStateLookups check suppressible
    [#3690]
  * Changes of version 2.17.0:
    + New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter,
    ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem,
    StatementSwitchToExpressionSwitch, UnqualifiedYield
    + Fixed issues:
  - InvalidParam warning on Javadoc for Java record components
    [#2321]
  - UnusedMethod flags @JsonValue methods as unused #3144
  - UnusedMethod: Add more JPA lifecycle annotations or make
    annotations configurable #3297
  - UnusedMethod: Support additional exempting method
    annotations #3428
  - Have InvalidParam support records #3437
  - Fix -XepDisableAllWarnings flag when passed on its own #3462
  - ASTHelpersSuggestions does not flag call to packge() on
    com.sun.tools.javac.code.Symbol.ClassSymbol #3482
  - @SupressWarnings on record compact constructor causes crash
    [#3494]
  * Changes of version 2.16.0:
    + New Checkers: ASTHelpersSuggestions,
    CanIgnoreReturnValueSuggester, LenientFormatStringValidation,
    UnnecessarilyUsedValue
    + Fixed issues:
  - Avoid using non-ASCII Unicode characters outside of comments
    and literals #3092
  - NullPointerException thrown during analysis #3220
  - NPE analysing new style switch statement (2.14.0) #3225
  - ImmutableChecker handles null types #3267
  - Drop pre-JDK 11 logic from Refaster's Inliner class #3441
  * Changes of version 2.15.0:
    + New Checkers: BuilderReturnThis,
    CanIgnoreReturnValueSuggester, CannotMockFinalClass,
    CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject,
    MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses,
    NullArgumentForNonNullParameter, SelfAlwaysReturnsThis,
    UnsafeWildcard, UnusedTypeParameter
  * Changes of version 2.14.0:
    + New checkers: BanJNDI,  EmptyTopLevelDeclaration,
    ErroneousBitwiseExpression,
    FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption,
    NullableOnContainingClass
  * Changes of version 2.13.1:
    + Fix a crash in UnnecessaryBoxedVariable
    + Include the unicode character in the diagnostic message
  * Changes of version 2.13.0:
    + Handle all annotations with the simple name Generated in
  - XepDisableWarningsInGeneratedCode
    + Reconcile BugChecker#isSuppressed with suppression handling in
    ErrorProneScanner
    + Fix a bug in enclosingPackage
    + Improve performance of fix application
    + Implicitly treat @AutoBuilder setter methods as
    @CanIgnoreReturnValue.
    + Remove some obsolete checks
    (PublicConstructorForAbstractClass, HashCodeToString)
  * Changes of version 2.12.1:
    + This release adds an infrastructure optimization to AppliedFix
    source code processing.
  * Changes of version 2.12.0:
    + New checks: BoxedPrimitiveEquality, DoubleBraceInitialization,
    IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod,
    LongDoubleConversion, RobolectricShadowDirectlyOn,
    StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion,
    Varifier</changelog>
</package>
<package pkgid="73e6ebf770b80fab8bf16c1fef2f89cafbcbed287fb66af7e83804a07c89bc16" name="gpars-bootstrap" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="150200.3.12.5"/>
  <changelog author="fstrba@suse.com" date="1574078400">- Initial packaging of binary boostrap version of gradle 4.4.1
- This package is only to be able to bootstrap gradle and should
  not be used for other purposes</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Regenerate to include the new slf4j-api.jar in the tarball</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Regenerate from the non-bootstrap build against objectweb-asm 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1575892800">- Regenerate to account for groovy upgrade to 2.4.16 and for
  changes allowing to use gradle with java 11</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Regenerate to account for groovy upgrade to 2.4.21</changelog>
  <changelog author="fstrba@suse.com" date="1620820800">- Regenerate to account for guava upgrade to 30.1.1</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Regenerate to account for aqute-bnd upgrade to 5.1.1 and
  related changes in other libraries</changelog>
  <changelog author="fstrba@suse.com" date="1647259200">- Regenerate to account for maven-resolver upgrade to 1.7.3
  and the new added maven-resolver-named-locks artifact</changelog>
  <changelog author="fstrba@suse.com" date="1651320000">- The org.jboss.netty:netty artifact does not exist any more under
  compatibility versions</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Adapt to the change in jline/jansi dependencies of gradle</changelog>
  <changelog author="fstrba@suse.com" date="1653048000">- Modify the launcher so that gradle-bootstrap can work with
  Java 17</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Regenerate to account for changes in gradle and groovy packages</changelog>
  <changelog author="fstrba@suse.com" date="1709899200">- Add missing dependency of aopalliance</changelog>
  <changelog author="fstrba@suse.com" date="1711454400">- Regenerate to account for integration of a backport for
  bsc#1145903, CVE-2019-15052</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Regenerate to account for the new plexus-xml dependency</changelog>
</package>
<package pkgid="37dfbf0a9ac43f6d9f6b03e84fc1848e043bb53d796288827b97cb75360cd140" name="gradle" arch="aarch64">
  <version epoch="0" ver="4.4.1" rel="150200.3.18.1"/>
  <changelog author="fstrba@suse.com" date="1574251200">- Gradle looks for slf4j-api.jar, so we provide a link there</changelog>
  <changelog author="fstrba@suse.com" date="1574683200">- Added patch:
  * gradle-4.4.1-asm7.patch
    + fix build with objectweb-asm 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1575892800">- Modified patch:
  * gradle-4.4.1-asm7.patch
    + Rediff and use ASM7 api instead of ASM6, since we are using
    objectweb-asm 7.2
- Added patches:
  * cast-estimated-runtime-to-long.patch
    + estimatedRuntime must be cast to long otherwise gradle build
    fails with "Cannot assign value of type java.math.BigDecimal
    to variable of type long".
  * java11-compatibility.patch
    + Fixes the compatibility with Java 11. This is backport of
    upstream changes in 4.8
  * java8-compatibility.patch
    + Keep compatibility with Java 8 by avoiding to use Java 9+
    APIs
  * remove-timestamps.patch
    + Avoid timestamps and thus irreproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1576584000">- Avoid all-released-versions.json as source, since we are not
  building integration tests.</changelog>
  <changelog author="fstrba@suse.com" date="1620820800">- Do not build against the legacy guava20 package any more
- Added patch:
  * port-to-guava-30.patch
    + Port gradle 4.4.1 to guava 30.1.1
    + Set source level to 1.8, since guava 30 uses default
    functions in interfaces, which is Java 8+ feature</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Remove build requires that are not strictly needed</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Modified patch:
  * 0013-Add-missing-transitive-dependencies.patch
    + Add osgi-compendium to the dependencies, since newer qute-bnd
    uses it</changelog>
  <changelog author="fstrba@suse.com" date="1646740800">- Remove from build dependencies some artifacts that are not
  needed</changelog>
  <changelog author="fstrba@suse.com" date="1647259200">- Fix build with maven-resolver 1.7.x
- Modified patch:
  * 0005-Port-to-Maven-3.3.9-and-Eclipse-Aether.patch
    + package the new artifact maven-resolver-named-locks</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Force building with java &lt;= 11</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Build against jansi 2.x
- Remove the jansi-native and hawtjni-runtime dependencies, since
  jansi 2.x does not depend on them
- Modified patch:
  * 0013-Add-missing-transitive-dependencies.patch
    + jansi does not have transitive dependencies any more
- Added patch:
  * gradle-jansi.patch
    + port to use jansi 2.x</changelog>
  <changelog author="fstrba@suse.com" date="1653048000">- Modify the launcher so that gradle can work with Java 17
- Do not force building with java &lt;= 15, since we now can run
  gradle-bootstrap with Java 17 too</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Added patch:
  * gradle-java17.patch
    + Allow actually build gradle using Java 16+</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1681214400">- Added patch:
  * use-nio-files-createTempFile-rather-than-File-createTempFile.patch
    + bsc#1184807 (CVE-2021-29428), bsc#1184799 (CVE-2021-29429)</changelog>
  <changelog author="pgajdos@suse.com" date="1682596800">- security update
- added patch:
  * gradle-CVE-2021-32751.patch
    + fix CVE-2021-32751 [bsc#1188569], 'application' plugin and
    the 'gradlew' script are both vulnerable to arbitrary code
    execution</changelog>
  <changelog author="fstrba@suse.com" date="1698840000">- Added patch:
  * sourcetarget.patch
    + Build ALL modules with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1709899200">- Fix build breakage on SLE-15-SP2 after upgrades of different
  dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1709899201">- Add missing dependency of aopalliance
- Modified patches:
  * 0005-Port-to-Maven-3.3.9-and-Eclipse-Aether.patch
    + add transitive dependency on aopalliance:aopalliance:1.0@jar
  * 0013-Add-missing-transitive-dependencies.patch
    + add dependency on 'biz.aQute.bnd:biz.aQute.bnd.util:3.4.0@jar'
    to fix build with newer aqute-bnd</changelog>
  <changelog author="fstrba@suse.com" date="1711454400">- security update
- Added patch:
  * gradle-CVE-2019-15052.patch
    + fix CVE-2019-15052 [bsc#1145903], authentication credentials
    are sent to all subsequent hosts that the request redirects to</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Added patch:
  * gradle-plexus-xml.patch
    + fix build with the plexus-xml split from plexus-utils</changelog>
</package>
<package pkgid="82a34f8160d90b81fa8935a2c30ab18368aa0c72481ef6a527ea3c1fe04d2505" name="gradle" arch="ppc64le">
  <version epoch="0" ver="4.4.1" rel="150200.3.18.1"/>
  <changelog author="fstrba@suse.com" date="1574251200">- Gradle looks for slf4j-api.jar, so we provide a link there</changelog>
  <changelog author="fstrba@suse.com" date="1574683200">- Added patch:
  * gradle-4.4.1-asm7.patch
    + fix build with objectweb-asm 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1575892800">- Modified patch:
  * gradle-4.4.1-asm7.patch
    + Rediff and use ASM7 api instead of ASM6, since we are using
    objectweb-asm 7.2
- Added patches:
  * cast-estimated-runtime-to-long.patch
    + estimatedRuntime must be cast to long otherwise gradle build
    fails with "Cannot assign value of type java.math.BigDecimal
    to variable of type long".
  * java11-compatibility.patch
    + Fixes the compatibility with Java 11. This is backport of
    upstream changes in 4.8
  * java8-compatibility.patch
    + Keep compatibility with Java 8 by avoiding to use Java 9+
    APIs
  * remove-timestamps.patch
    + Avoid timestamps and thus irreproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1576584000">- Avoid all-released-versions.json as source, since we are not
  building integration tests.</changelog>
  <changelog author="fstrba@suse.com" date="1620820800">- Do not build against the legacy guava20 package any more
- Added patch:
  * port-to-guava-30.patch
    + Port gradle 4.4.1 to guava 30.1.1
    + Set source level to 1.8, since guava 30 uses default
    functions in interfaces, which is Java 8+ feature</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Remove build requires that are not strictly needed</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Modified patch:
  * 0013-Add-missing-transitive-dependencies.patch
    + Add osgi-compendium to the dependencies, since newer qute-bnd
    uses it</changelog>
  <changelog author="fstrba@suse.com" date="1646740800">- Remove from build dependencies some artifacts that are not
  needed</changelog>
  <changelog author="fstrba@suse.com" date="1647259200">- Fix build with maven-resolver 1.7.x
- Modified patch:
  * 0005-Port-to-Maven-3.3.9-and-Eclipse-Aether.patch
    + package the new artifact maven-resolver-named-locks</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Force building with java &lt;= 11</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Build against jansi 2.x
- Remove the jansi-native and hawtjni-runtime dependencies, since
  jansi 2.x does not depend on them
- Modified patch:
  * 0013-Add-missing-transitive-dependencies.patch
    + jansi does not have transitive dependencies any more
- Added patch:
  * gradle-jansi.patch
    + port to use jansi 2.x</changelog>
  <changelog author="fstrba@suse.com" date="1653048000">- Modify the launcher so that gradle can work with Java 17
- Do not force building with java &lt;= 15, since we now can run
  gradle-bootstrap with Java 17 too</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Added patch:
  * gradle-java17.patch
    + Allow actually build gradle using Java 16+</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1681214400">- Added patch:
  * use-nio-files-createTempFile-rather-than-File-createTempFile.patch
    + bsc#1184807 (CVE-2021-29428), bsc#1184799 (CVE-2021-29429)</changelog>
  <changelog author="pgajdos@suse.com" date="1682596800">- security update
- added patch:
  * gradle-CVE-2021-32751.patch
    + fix CVE-2021-32751 [bsc#1188569], 'application' plugin and
    the 'gradlew' script are both vulnerable to arbitrary code
    execution</changelog>
  <changelog author="fstrba@suse.com" date="1698840000">- Added patch:
  * sourcetarget.patch
    + Build ALL modules with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1709899200">- Fix build breakage on SLE-15-SP2 after upgrades of different
  dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1709899201">- Add missing dependency of aopalliance
- Modified patches:
  * 0005-Port-to-Maven-3.3.9-and-Eclipse-Aether.patch
    + add transitive dependency on aopalliance:aopalliance:1.0@jar
  * 0013-Add-missing-transitive-dependencies.patch
    + add dependency on 'biz.aQute.bnd:biz.aQute.bnd.util:3.4.0@jar'
    to fix build with newer aqute-bnd</changelog>
  <changelog author="fstrba@suse.com" date="1711454400">- security update
- Added patch:
  * gradle-CVE-2019-15052.patch
    + fix CVE-2019-15052 [bsc#1145903], authentication credentials
    are sent to all subsequent hosts that the request redirects to</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Added patch:
  * gradle-plexus-xml.patch
    + fix build with the plexus-xml split from plexus-utils</changelog>
</package>
<package pkgid="c31f0f7d292e714a50c49c76f43640c0ddfcdb011eb514fbd8bcb6fc288473ea" name="gradle" arch="s390x">
  <version epoch="0" ver="4.4.1" rel="150200.3.18.1"/>
  <changelog author="fstrba@suse.com" date="1574251200">- Gradle looks for slf4j-api.jar, so we provide a link there</changelog>
  <changelog author="fstrba@suse.com" date="1574683200">- Added patch:
  * gradle-4.4.1-asm7.patch
    + fix build with objectweb-asm 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1575892800">- Modified patch:
  * gradle-4.4.1-asm7.patch
    + Rediff and use ASM7 api instead of ASM6, since we are using
    objectweb-asm 7.2
- Added patches:
  * cast-estimated-runtime-to-long.patch
    + estimatedRuntime must be cast to long otherwise gradle build
    fails with "Cannot assign value of type java.math.BigDecimal
    to variable of type long".
  * java11-compatibility.patch
    + Fixes the compatibility with Java 11. This is backport of
    upstream changes in 4.8
  * java8-compatibility.patch
    + Keep compatibility with Java 8 by avoiding to use Java 9+
    APIs
  * remove-timestamps.patch
    + Avoid timestamps and thus irreproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1576584000">- Avoid all-released-versions.json as source, since we are not
  building integration tests.</changelog>
  <changelog author="fstrba@suse.com" date="1620820800">- Do not build against the legacy guava20 package any more
- Added patch:
  * port-to-guava-30.patch
    + Port gradle 4.4.1 to guava 30.1.1
    + Set source level to 1.8, since guava 30 uses default
    functions in interfaces, which is Java 8+ feature</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Remove build requires that are not strictly needed</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Modified patch:
  * 0013-Add-missing-transitive-dependencies.patch
    + Add osgi-compendium to the dependencies, since newer qute-bnd
    uses it</changelog>
  <changelog author="fstrba@suse.com" date="1646740800">- Remove from build dependencies some artifacts that are not
  needed</changelog>
  <changelog author="fstrba@suse.com" date="1647259200">- Fix build with maven-resolver 1.7.x
- Modified patch:
  * 0005-Port-to-Maven-3.3.9-and-Eclipse-Aether.patch
    + package the new artifact maven-resolver-named-locks</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Force building with java &lt;= 11</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Build against jansi 2.x
- Remove the jansi-native and hawtjni-runtime dependencies, since
  jansi 2.x does not depend on them
- Modified patch:
  * 0013-Add-missing-transitive-dependencies.patch
    + jansi does not have transitive dependencies any more
- Added patch:
  * gradle-jansi.patch
    + port to use jansi 2.x</changelog>
  <changelog author="fstrba@suse.com" date="1653048000">- Modify the launcher so that gradle can work with Java 17
- Do not force building with java &lt;= 15, since we now can run
  gradle-bootstrap with Java 17 too</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Added patch:
  * gradle-java17.patch
    + Allow actually build gradle using Java 16+</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1681214400">- Added patch:
  * use-nio-files-createTempFile-rather-than-File-createTempFile.patch
    + bsc#1184807 (CVE-2021-29428), bsc#1184799 (CVE-2021-29429)</changelog>
  <changelog author="pgajdos@suse.com" date="1682596800">- security update
- added patch:
  * gradle-CVE-2021-32751.patch
    + fix CVE-2021-32751 [bsc#1188569], 'application' plugin and
    the 'gradlew' script are both vulnerable to arbitrary code
    execution</changelog>
  <changelog author="fstrba@suse.com" date="1698840000">- Added patch:
  * sourcetarget.patch
    + Build ALL modules with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1709899200">- Fix build breakage on SLE-15-SP2 after upgrades of different
  dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1709899201">- Add missing dependency of aopalliance
- Modified patches:
  * 0005-Port-to-Maven-3.3.9-and-Eclipse-Aether.patch
    + add transitive dependency on aopalliance:aopalliance:1.0@jar
  * 0013-Add-missing-transitive-dependencies.patch
    + add dependency on 'biz.aQute.bnd:biz.aQute.bnd.util:3.4.0@jar'
    to fix build with newer aqute-bnd</changelog>
  <changelog author="fstrba@suse.com" date="1711454400">- security update
- Added patch:
  * gradle-CVE-2019-15052.patch
    + fix CVE-2019-15052 [bsc#1145903], authentication credentials
    are sent to all subsequent hosts that the request redirects to</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Added patch:
  * gradle-plexus-xml.patch
    + fix build with the plexus-xml split from plexus-utils</changelog>
</package>
<package pkgid="c916222c74eed2f7f10109a69d4f4fa690a0c62a7424400539f0dbf57a22829e" name="gradle" arch="src">
  <version epoch="0" ver="4.4.1" rel="150200.3.18.1"/>
  <changelog author="fstrba@suse.com" date="1574251200">- Gradle looks for slf4j-api.jar, so we provide a link there</changelog>
  <changelog author="fstrba@suse.com" date="1574683200">- Added patch:
  * gradle-4.4.1-asm7.patch
    + fix build with objectweb-asm 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1575892800">- Modified patch:
  * gradle-4.4.1-asm7.patch
    + Rediff and use ASM7 api instead of ASM6, since we are using
    objectweb-asm 7.2
- Added patches:
  * cast-estimated-runtime-to-long.patch
    + estimatedRuntime must be cast to long otherwise gradle build
    fails with "Cannot assign value of type java.math.BigDecimal
    to variable of type long".
  * java11-compatibility.patch
    + Fixes the compatibility with Java 11. This is backport of
    upstream changes in 4.8
  * java8-compatibility.patch
    + Keep compatibility with Java 8 by avoiding to use Java 9+
    APIs
  * remove-timestamps.patch
    + Avoid timestamps and thus irreproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1576584000">- Avoid all-released-versions.json as source, since we are not
  building integration tests.</changelog>
  <changelog author="fstrba@suse.com" date="1620820800">- Do not build against the legacy guava20 package any more
- Added patch:
  * port-to-guava-30.patch
    + Port gradle 4.4.1 to guava 30.1.1
    + Set source level to 1.8, since guava 30 uses default
    functions in interfaces, which is Java 8+ feature</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Remove build requires that are not strictly needed</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Modified patch:
  * 0013-Add-missing-transitive-dependencies.patch
    + Add osgi-compendium to the dependencies, since newer qute-bnd
    uses it</changelog>
  <changelog author="fstrba@suse.com" date="1646740800">- Remove from build dependencies some artifacts that are not
  needed</changelog>
  <changelog author="fstrba@suse.com" date="1647259200">- Fix build with maven-resolver 1.7.x
- Modified patch:
  * 0005-Port-to-Maven-3.3.9-and-Eclipse-Aether.patch
    + package the new artifact maven-resolver-named-locks</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Force building with java &lt;= 11</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Build against jansi 2.x
- Remove the jansi-native and hawtjni-runtime dependencies, since
  jansi 2.x does not depend on them
- Modified patch:
  * 0013-Add-missing-transitive-dependencies.patch
    + jansi does not have transitive dependencies any more
- Added patch:
  * gradle-jansi.patch
    + port to use jansi 2.x</changelog>
  <changelog author="fstrba@suse.com" date="1653048000">- Modify the launcher so that gradle can work with Java 17
- Do not force building with java &lt;= 15, since we now can run
  gradle-bootstrap with Java 17 too</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Added patch:
  * gradle-java17.patch
    + Allow actually build gradle using Java 16+</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1681214400">- Added patch:
  * use-nio-files-createTempFile-rather-than-File-createTempFile.patch
    + bsc#1184807 (CVE-2021-29428), bsc#1184799 (CVE-2021-29429)</changelog>
  <changelog author="pgajdos@suse.com" date="1682596800">- security update
- added patch:
  * gradle-CVE-2021-32751.patch
    + fix CVE-2021-32751 [bsc#1188569], 'application' plugin and
    the 'gradlew' script are both vulnerable to arbitrary code
    execution</changelog>
  <changelog author="fstrba@suse.com" date="1698840000">- Added patch:
  * sourcetarget.patch
    + Build ALL modules with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1709899200">- Fix build breakage on SLE-15-SP2 after upgrades of different
  dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1709899201">- Add missing dependency of aopalliance
- Modified patches:
  * 0005-Port-to-Maven-3.3.9-and-Eclipse-Aether.patch
    + add transitive dependency on aopalliance:aopalliance:1.0@jar
  * 0013-Add-missing-transitive-dependencies.patch
    + add dependency on 'biz.aQute.bnd:biz.aQute.bnd.util:3.4.0@jar'
    to fix build with newer aqute-bnd</changelog>
  <changelog author="fstrba@suse.com" date="1711454400">- security update
- Added patch:
  * gradle-CVE-2019-15052.patch
    + fix CVE-2019-15052 [bsc#1145903], authentication credentials
    are sent to all subsequent hosts that the request redirects to</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Added patch:
  * gradle-plexus-xml.patch
    + fix build with the plexus-xml split from plexus-utils</changelog>
</package>
<package pkgid="6cb6af574946942ddeafcb29398167bb36a927509918ab15035509c287c7dcba" name="gradle" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="150200.3.18.1"/>
  <changelog author="fstrba@suse.com" date="1574251200">- Gradle looks for slf4j-api.jar, so we provide a link there</changelog>
  <changelog author="fstrba@suse.com" date="1574683200">- Added patch:
  * gradle-4.4.1-asm7.patch
    + fix build with objectweb-asm 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1575892800">- Modified patch:
  * gradle-4.4.1-asm7.patch
    + Rediff and use ASM7 api instead of ASM6, since we are using
    objectweb-asm 7.2
- Added patches:
  * cast-estimated-runtime-to-long.patch
    + estimatedRuntime must be cast to long otherwise gradle build
    fails with "Cannot assign value of type java.math.BigDecimal
    to variable of type long".
  * java11-compatibility.patch
    + Fixes the compatibility with Java 11. This is backport of
    upstream changes in 4.8
  * java8-compatibility.patch
    + Keep compatibility with Java 8 by avoiding to use Java 9+
    APIs
  * remove-timestamps.patch
    + Avoid timestamps and thus irreproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1576584000">- Avoid all-released-versions.json as source, since we are not
  building integration tests.</changelog>
  <changelog author="fstrba@suse.com" date="1620820800">- Do not build against the legacy guava20 package any more
- Added patch:
  * port-to-guava-30.patch
    + Port gradle 4.4.1 to guava 30.1.1
    + Set source level to 1.8, since guava 30 uses default
    functions in interfaces, which is Java 8+ feature</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Remove build requires that are not strictly needed</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Modified patch:
  * 0013-Add-missing-transitive-dependencies.patch
    + Add osgi-compendium to the dependencies, since newer qute-bnd
    uses it</changelog>
  <changelog author="fstrba@suse.com" date="1646740800">- Remove from build dependencies some artifacts that are not
  needed</changelog>
  <changelog author="fstrba@suse.com" date="1647259200">- Fix build with maven-resolver 1.7.x
- Modified patch:
  * 0005-Port-to-Maven-3.3.9-and-Eclipse-Aether.patch
    + package the new artifact maven-resolver-named-locks</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Force building with java &lt;= 11</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Build against jansi 2.x
- Remove the jansi-native and hawtjni-runtime dependencies, since
  jansi 2.x does not depend on them
- Modified patch:
  * 0013-Add-missing-transitive-dependencies.patch
    + jansi does not have transitive dependencies any more
- Added patch:
  * gradle-jansi.patch
    + port to use jansi 2.x</changelog>
  <changelog author="fstrba@suse.com" date="1653048000">- Modify the launcher so that gradle can work with Java 17
- Do not force building with java &lt;= 15, since we now can run
  gradle-bootstrap with Java 17 too</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Added patch:
  * gradle-java17.patch
    + Allow actually build gradle using Java 16+</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1681214400">- Added patch:
  * use-nio-files-createTempFile-rather-than-File-createTempFile.patch
    + bsc#1184807 (CVE-2021-29428), bsc#1184799 (CVE-2021-29429)</changelog>
  <changelog author="pgajdos@suse.com" date="1682596800">- security update
- added patch:
  * gradle-CVE-2021-32751.patch
    + fix CVE-2021-32751 [bsc#1188569], 'application' plugin and
    the 'gradlew' script are both vulnerable to arbitrary code
    execution</changelog>
  <changelog author="fstrba@suse.com" date="1698840000">- Added patch:
  * sourcetarget.patch
    + Build ALL modules with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1709899200">- Fix build breakage on SLE-15-SP2 after upgrades of different
  dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1709899201">- Add missing dependency of aopalliance
- Modified patches:
  * 0005-Port-to-Maven-3.3.9-and-Eclipse-Aether.patch
    + add transitive dependency on aopalliance:aopalliance:1.0@jar
  * 0013-Add-missing-transitive-dependencies.patch
    + add dependency on 'biz.aQute.bnd:biz.aQute.bnd.util:3.4.0@jar'
    to fix build with newer aqute-bnd</changelog>
  <changelog author="fstrba@suse.com" date="1711454400">- security update
- Added patch:
  * gradle-CVE-2019-15052.patch
    + fix CVE-2019-15052 [bsc#1145903], authentication credentials
    are sent to all subsequent hosts that the request redirects to</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Added patch:
  * gradle-plexus-xml.patch
    + fix build with the plexus-xml split from plexus-utils</changelog>
</package>
<package pkgid="85736e099858da995f827d8927f091f2ead0b5da2ce755ffa9e022f9a9b1bb2f" name="gradle-bootstrap" arch="aarch64">
  <version epoch="0" ver="4.4.1" rel="150200.3.12.5"/>
  <changelog author="fstrba@suse.com" date="1574078400">- Initial packaging of binary boostrap version of gradle 4.4.1
- This package is only to be able to bootstrap gradle and should
  not be used for other purposes</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Regenerate to include the new slf4j-api.jar in the tarball</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Regenerate from the non-bootstrap build against objectweb-asm 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1575892800">- Regenerate to account for groovy upgrade to 2.4.16 and for
  changes allowing to use gradle with java 11</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Regenerate to account for groovy upgrade to 2.4.21</changelog>
  <changelog author="fstrba@suse.com" date="1620820800">- Regenerate to account for guava upgrade to 30.1.1</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Regenerate to account for aqute-bnd upgrade to 5.1.1 and
  related changes in other libraries</changelog>
  <changelog author="fstrba@suse.com" date="1647259200">- Regenerate to account for maven-resolver upgrade to 1.7.3
  and the new added maven-resolver-named-locks artifact</changelog>
  <changelog author="fstrba@suse.com" date="1651320000">- The org.jboss.netty:netty artifact does not exist any more under
  compatibility versions</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Adapt to the change in jline/jansi dependencies of gradle</changelog>
  <changelog author="fstrba@suse.com" date="1653048000">- Modify the launcher so that gradle-bootstrap can work with
  Java 17</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Regenerate to account for changes in gradle and groovy packages</changelog>
  <changelog author="fstrba@suse.com" date="1709899200">- Add missing dependency of aopalliance</changelog>
  <changelog author="fstrba@suse.com" date="1711454400">- Regenerate to account for integration of a backport for
  bsc#1145903, CVE-2019-15052</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Regenerate to account for the new plexus-xml dependency</changelog>
</package>
<package pkgid="08749f1819b0054dcfdb9cd7185e0bda61251d05b695357ca4906aec78c1c5f6" name="gradle-bootstrap" arch="ppc64le">
  <version epoch="0" ver="4.4.1" rel="150200.3.12.5"/>
  <changelog author="fstrba@suse.com" date="1574078400">- Initial packaging of binary boostrap version of gradle 4.4.1
- This package is only to be able to bootstrap gradle and should
  not be used for other purposes</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Regenerate to include the new slf4j-api.jar in the tarball</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Regenerate from the non-bootstrap build against objectweb-asm 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1575892800">- Regenerate to account for groovy upgrade to 2.4.16 and for
  changes allowing to use gradle with java 11</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Regenerate to account for groovy upgrade to 2.4.21</changelog>
  <changelog author="fstrba@suse.com" date="1620820800">- Regenerate to account for guava upgrade to 30.1.1</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Regenerate to account for aqute-bnd upgrade to 5.1.1 and
  related changes in other libraries</changelog>
  <changelog author="fstrba@suse.com" date="1647259200">- Regenerate to account for maven-resolver upgrade to 1.7.3
  and the new added maven-resolver-named-locks artifact</changelog>
  <changelog author="fstrba@suse.com" date="1651320000">- The org.jboss.netty:netty artifact does not exist any more under
  compatibility versions</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Adapt to the change in jline/jansi dependencies of gradle</changelog>
  <changelog author="fstrba@suse.com" date="1653048000">- Modify the launcher so that gradle-bootstrap can work with
  Java 17</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Regenerate to account for changes in gradle and groovy packages</changelog>
  <changelog author="fstrba@suse.com" date="1709899200">- Add missing dependency of aopalliance</changelog>
  <changelog author="fstrba@suse.com" date="1711454400">- Regenerate to account for integration of a backport for
  bsc#1145903, CVE-2019-15052</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Regenerate to account for the new plexus-xml dependency</changelog>
</package>
<package pkgid="9e88dbfea38a90ee9bcd89295c54b5bf41b3a4eacc5d705194f36b22cb53519d" name="gradle-bootstrap" arch="s390x">
  <version epoch="0" ver="4.4.1" rel="150200.3.12.5"/>
  <changelog author="fstrba@suse.com" date="1574078400">- Initial packaging of binary boostrap version of gradle 4.4.1
- This package is only to be able to bootstrap gradle and should
  not be used for other purposes</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Regenerate to include the new slf4j-api.jar in the tarball</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Regenerate from the non-bootstrap build against objectweb-asm 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1575892800">- Regenerate to account for groovy upgrade to 2.4.16 and for
  changes allowing to use gradle with java 11</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Regenerate to account for groovy upgrade to 2.4.21</changelog>
  <changelog author="fstrba@suse.com" date="1620820800">- Regenerate to account for guava upgrade to 30.1.1</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Regenerate to account for aqute-bnd upgrade to 5.1.1 and
  related changes in other libraries</changelog>
  <changelog author="fstrba@suse.com" date="1647259200">- Regenerate to account for maven-resolver upgrade to 1.7.3
  and the new added maven-resolver-named-locks artifact</changelog>
  <changelog author="fstrba@suse.com" date="1651320000">- The org.jboss.netty:netty artifact does not exist any more under
  compatibility versions</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Adapt to the change in jline/jansi dependencies of gradle</changelog>
  <changelog author="fstrba@suse.com" date="1653048000">- Modify the launcher so that gradle-bootstrap can work with
  Java 17</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Regenerate to account for changes in gradle and groovy packages</changelog>
  <changelog author="fstrba@suse.com" date="1709899200">- Add missing dependency of aopalliance</changelog>
  <changelog author="fstrba@suse.com" date="1711454400">- Regenerate to account for integration of a backport for
  bsc#1145903, CVE-2019-15052</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Regenerate to account for the new plexus-xml dependency</changelog>
</package>
<package pkgid="ba34daf3ae0511bfe2f002369bb06aa87856f77d9d20a5056e3e7c4f562143a2" name="gradle-bootstrap" arch="src">
  <version epoch="0" ver="4.4.1" rel="150200.3.12.5"/>
  <changelog author="fstrba@suse.com" date="1574078400">- Initial packaging of binary boostrap version of gradle 4.4.1
- This package is only to be able to bootstrap gradle and should
  not be used for other purposes</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Regenerate to include the new slf4j-api.jar in the tarball</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Regenerate from the non-bootstrap build against objectweb-asm 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1575892800">- Regenerate to account for groovy upgrade to 2.4.16 and for
  changes allowing to use gradle with java 11</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Regenerate to account for groovy upgrade to 2.4.21</changelog>
  <changelog author="fstrba@suse.com" date="1620820800">- Regenerate to account for guava upgrade to 30.1.1</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Regenerate to account for aqute-bnd upgrade to 5.1.1 and
  related changes in other libraries</changelog>
  <changelog author="fstrba@suse.com" date="1647259200">- Regenerate to account for maven-resolver upgrade to 1.7.3
  and the new added maven-resolver-named-locks artifact</changelog>
  <changelog author="fstrba@suse.com" date="1651320000">- The org.jboss.netty:netty artifact does not exist any more under
  compatibility versions</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Adapt to the change in jline/jansi dependencies of gradle</changelog>
  <changelog author="fstrba@suse.com" date="1653048000">- Modify the launcher so that gradle-bootstrap can work with
  Java 17</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Regenerate to account for changes in gradle and groovy packages</changelog>
  <changelog author="fstrba@suse.com" date="1709899200">- Add missing dependency of aopalliance</changelog>
  <changelog author="fstrba@suse.com" date="1711454400">- Regenerate to account for integration of a backport for
  bsc#1145903, CVE-2019-15052</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Regenerate to account for the new plexus-xml dependency</changelog>
</package>
<package pkgid="56065fd8482dfd8ab57bf3f871148e2c32270653cd905c8f0e9cb666a56a60d0" name="gradle-bootstrap" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="150200.3.12.5"/>
  <changelog author="fstrba@suse.com" date="1574078400">- Initial packaging of binary boostrap version of gradle 4.4.1
- This package is only to be able to bootstrap gradle and should
  not be used for other purposes</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Regenerate to include the new slf4j-api.jar in the tarball</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Regenerate from the non-bootstrap build against objectweb-asm 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1575892800">- Regenerate to account for groovy upgrade to 2.4.16 and for
  changes allowing to use gradle with java 11</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Regenerate to account for groovy upgrade to 2.4.21</changelog>
  <changelog author="fstrba@suse.com" date="1620820800">- Regenerate to account for guava upgrade to 30.1.1</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Regenerate to account for aqute-bnd upgrade to 5.1.1 and
  related changes in other libraries</changelog>
  <changelog author="fstrba@suse.com" date="1647259200">- Regenerate to account for maven-resolver upgrade to 1.7.3
  and the new added maven-resolver-named-locks artifact</changelog>
  <changelog author="fstrba@suse.com" date="1651320000">- The org.jboss.netty:netty artifact does not exist any more under
  compatibility versions</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Adapt to the change in jline/jansi dependencies of gradle</changelog>
  <changelog author="fstrba@suse.com" date="1653048000">- Modify the launcher so that gradle-bootstrap can work with
  Java 17</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Regenerate to account for changes in gradle and groovy packages</changelog>
  <changelog author="fstrba@suse.com" date="1709899200">- Add missing dependency of aopalliance</changelog>
  <changelog author="fstrba@suse.com" date="1711454400">- Regenerate to account for integration of a backport for
  bsc#1145903, CVE-2019-15052</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Regenerate to account for the new plexus-xml dependency</changelog>
</package>
<package pkgid="b965356c9e0f5656ce71466ff810d34842121a33517bc5f10784c9b2710b3201" name="grafana" arch="aarch64">
  <version epoch="0" ver="9.5.18" rel="150200.3.56.1"/>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753 (bsc#1218843).
    Chore: Fix CVE-2021-3807 (bsc#1192154).
    Chore: Fix CVE-2021-3918 (bsc#1192696).
    Chore: Fix CVE-2021-43138 (bsc#1200480).
    Chore: Fix CVE-2022-0155 (bsc#1218844).
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683201">- Update to 9.5.1
  * Bug fixes
    Loki Variable Query Editor: Fix bug when the query is updated
    Expressions: Fix expression load with legacy UID -100</changelog>
  <changelog author="witold.bedyk@suse.com" date="1687521600">- Update to version 9.5.5:
  * Bug fixes
    Security: Fix authentication bypass using Azure AD OAuth
    (bsc#1212641, CVE-2023-3128, jsc#PED-3694).
    Auth: Show invite button if disable login form is set to false.
    Azure: Fix Kusto auto-completion for Azure datasources.
    RBAC: Remove legacy AC editor and admin role on new dashboard
    route.
    API: Revert allowing editors to access GET /datasources.
    Settings: Add ability to override skip_org_role_sync with Env
    variables.
- Update to version 9.5.3:
  * Bug fixes
    Query: Prevent crash while executing concurrent mixed queries
    (bsc#1212099, CVE-2023-2801).
    Alerting: Require alert.notifications:write permissions to test
    receivers and templates (bsc#1212100, CVE-2023-2183).
- Update to version 9.5.2:
  * Bug fixes
    Alerting: Scheduler use rule fingerprint instead of version.
    Explore: Update table min height.
    DataLinks: Encoded URL fixed.
    TimeSeries: Fix leading null-fill for missing intervals.
    Dashboard: Revert fixed header shown on mobile devices in the
    new panel header.
    PostgreSQL: Fix TLS certificate issue by downgrading lib/pq.
    Provisioning: Fix provisioning issues with legacy alerting and
    data source permissions.
    Alerting: Fix misleading status code in provisioning API.
    Loki: Fix log samples using `instant` queries.
    Panel Header: Implement new Panel Header on Angular Panels.
    Azure Monitor: Fix bug that was not showing resources for
    certain locations.
    Alerting: Fix panic when reparenting receivers to groups
    following an attempted rename via Provisioning.
    Cloudwatch Logs: Clarify Cloudwatch Logs Limits.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1692792000">- Update to version 9.5.8:
  * Features and enhancements
    GenericOAuth: Set sub as auth id
  * Bug fixes:
    DataSourceProxy: Fix url validation error handling
- Update to version 9.5.7:
  * Features and enhancements
    Alerting: Sort NumberCaptureValues in EvaluationString
    Alerting: Improve performance of matching captures
    Alerting: No longer silence paused alerts during legacy
    migration
    Alerting: Remove and revert flag alertingBigTransactions
    Alerting: Migrate unknown NoData\Error settings to the default
    Tracing: supply Grafana build version
    Tempo: Escape regex-sensitive characters in span name before
    building promql query
  * Bug fixes:
    Plugins: Only configure plugin proxy transport once
    Alerting: Fix unique violation when updating rule group with
    title chains/cycles
    Prometheus: Version detect bug
    Prometheus: Fix heatmap format with no data
    Database: Change getExistingDashboardByTitleAndFolder to get
    dashboard by title, not slug
    Alerting: Convert 'Both' type Prometheus queries to 'Range' in
    migration
    SQLStore: Fix Postgres dialect treating "false" migrator
    default as true
    Alerting: Support newer http_config struct
    InfluxDB: Interpolate retention policies
    StatusHistory: Fix rendering of value-mapped null
    Alerting: Fix provenance guard checks for Alertmanager
    configuration to not cause panic when compared nested
    objects
    AnonymousAuth: Fix concurrent read-write crash
    AzureMonitor: Ensure legacy properties containing template
    variables are correctly migrated
    Explore: Remove data source onboarding page
    Dashboard: Re-align Save form
    Azure Monitor: Fix bug that did not show alert rule preview
    Histogram: Respect min/max panel settings for x-axis
    Heatmap: Fix color rendering for value ranges &lt; 1
    Heatmap: Handle unsorted timestamps in calculate mode
    Google Cloud Monitor: Fix mem usage for dropdown
    AzureMonitor: Fix logs query multi-resource and timespan values
    Utils: Reimplement util.GetRandomString to avoid modulo bias
    Alerting: Fix matching labels with spaces in their values
    Dashboard: Fix applying timezone to datetime variables
    Dashboard: Fix panel description event triggering every time
    panel is rendered
    Tempo: Fix get label values based on CoreApp type
    Heatmap: Fix log scale editor
    Dashboard: Fix disappearing panel when viewed panel is
    refreshed
    Prometheus: Fix bug in creating autocomplete queries with
    labels
    Prometheus: Fix Query Inspector expression range value
    Alerting: Fix migration failing if alert_configuration table is
    not empty
    InfluxDB: Fix querying retention policies on flux mode
- Update to version 9.5.6:
  * Bug fixes
    Dashboard: Fix library panels in collapsed rows not getting
    updated
    Auth: Add and document option for enabling email lookup</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708603200">- Update to version 9.5.16:
  * [SECURITY] CVE-2023-6152: Add email verification when updating
    user email (bsc#1219912)
  * [BUGFIX] Annotations: Split cleanup into separate queries and
    deletes to avoid deadlocks on MySQL
- Update to version 9.5.15:
  * [FEATURE] Alerting: Attempt to retry retryable errors
- Update to version 9.5.14:
  * [BUGFIX] Alerting: Fix state manager to not keep
    datasource_uid and ref_id labels in state after Error
  * [BUGFIX] Transformations: Config overrides being lost when
    config from query transform is applied
  * [BUGFIX] LDAP: Fix enable users on successfull login
- Update to version 9.5.13:
  * [BUGFIX] BrowseDashboards: Only remember the most recent
    expanded folder
  * [BUGFIX] Licensing: Pass func to update env variables when
    starting plugin
- Update to version 9.5.12:
  * [FEATURE] Azure: Add support for Workload Identity
    authentication
- Update to version 9.5.9:
  * [FEATURE] SSE: Fix DSNode to not panic when response has empty
    response
  * [FEATURE] Prometheus: Handle the response with different field
    key order
  * [BUGFIX] LDAP: Fix user disabling</changelog>
  <changelog author="witold.bedyk@suse.com" date="1709899200">- Require Go 1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1712318400">- Packaging improvements:
  * Changed deprecated `disabled` service mode to `manual`
  * Drop golang-packaging macros
  * Drop explicit mod=vendor as it is enabled automatically
- Update to version 9.5.18:
  * [SECURITY] CVE-2024-1313: Require same organisation when
    deleting snapshots (bsc#1222155)
- Update to version 9.5.17:
  * [FEATURE] Alerting: Backport use Alertmanager API v2</changelog>
</package>
<package pkgid="e743c63b0e3a9ccc2bdc75d8bd3cd05f12bb20a4c715e8a023f32f760945e03f" name="grafana" arch="ppc64le">
  <version epoch="0" ver="9.5.18" rel="150200.3.56.1"/>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753 (bsc#1218843).
    Chore: Fix CVE-2021-3807 (bsc#1192154).
    Chore: Fix CVE-2021-3918 (bsc#1192696).
    Chore: Fix CVE-2021-43138 (bsc#1200480).
    Chore: Fix CVE-2022-0155 (bsc#1218844).
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683201">- Update to 9.5.1
  * Bug fixes
    Loki Variable Query Editor: Fix bug when the query is updated
    Expressions: Fix expression load with legacy UID -100</changelog>
  <changelog author="witold.bedyk@suse.com" date="1687521600">- Update to version 9.5.5:
  * Bug fixes
    Security: Fix authentication bypass using Azure AD OAuth
    (bsc#1212641, CVE-2023-3128, jsc#PED-3694).
    Auth: Show invite button if disable login form is set to false.
    Azure: Fix Kusto auto-completion for Azure datasources.
    RBAC: Remove legacy AC editor and admin role on new dashboard
    route.
    API: Revert allowing editors to access GET /datasources.
    Settings: Add ability to override skip_org_role_sync with Env
    variables.
- Update to version 9.5.3:
  * Bug fixes
    Query: Prevent crash while executing concurrent mixed queries
    (bsc#1212099, CVE-2023-2801).
    Alerting: Require alert.notifications:write permissions to test
    receivers and templates (bsc#1212100, CVE-2023-2183).
- Update to version 9.5.2:
  * Bug fixes
    Alerting: Scheduler use rule fingerprint instead of version.
    Explore: Update table min height.
    DataLinks: Encoded URL fixed.
    TimeSeries: Fix leading null-fill for missing intervals.
    Dashboard: Revert fixed header shown on mobile devices in the
    new panel header.
    PostgreSQL: Fix TLS certificate issue by downgrading lib/pq.
    Provisioning: Fix provisioning issues with legacy alerting and
    data source permissions.
    Alerting: Fix misleading status code in provisioning API.
    Loki: Fix log samples using `instant` queries.
    Panel Header: Implement new Panel Header on Angular Panels.
    Azure Monitor: Fix bug that was not showing resources for
    certain locations.
    Alerting: Fix panic when reparenting receivers to groups
    following an attempted rename via Provisioning.
    Cloudwatch Logs: Clarify Cloudwatch Logs Limits.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1692792000">- Update to version 9.5.8:
  * Features and enhancements
    GenericOAuth: Set sub as auth id
  * Bug fixes:
    DataSourceProxy: Fix url validation error handling
- Update to version 9.5.7:
  * Features and enhancements
    Alerting: Sort NumberCaptureValues in EvaluationString
    Alerting: Improve performance of matching captures
    Alerting: No longer silence paused alerts during legacy
    migration
    Alerting: Remove and revert flag alertingBigTransactions
    Alerting: Migrate unknown NoData\Error settings to the default
    Tracing: supply Grafana build version
    Tempo: Escape regex-sensitive characters in span name before
    building promql query
  * Bug fixes:
    Plugins: Only configure plugin proxy transport once
    Alerting: Fix unique violation when updating rule group with
    title chains/cycles
    Prometheus: Version detect bug
    Prometheus: Fix heatmap format with no data
    Database: Change getExistingDashboardByTitleAndFolder to get
    dashboard by title, not slug
    Alerting: Convert 'Both' type Prometheus queries to 'Range' in
    migration
    SQLStore: Fix Postgres dialect treating "false" migrator
    default as true
    Alerting: Support newer http_config struct
    InfluxDB: Interpolate retention policies
    StatusHistory: Fix rendering of value-mapped null
    Alerting: Fix provenance guard checks for Alertmanager
    configuration to not cause panic when compared nested
    objects
    AnonymousAuth: Fix concurrent read-write crash
    AzureMonitor: Ensure legacy properties containing template
    variables are correctly migrated
    Explore: Remove data source onboarding page
    Dashboard: Re-align Save form
    Azure Monitor: Fix bug that did not show alert rule preview
    Histogram: Respect min/max panel settings for x-axis
    Heatmap: Fix color rendering for value ranges &lt; 1
    Heatmap: Handle unsorted timestamps in calculate mode
    Google Cloud Monitor: Fix mem usage for dropdown
    AzureMonitor: Fix logs query multi-resource and timespan values
    Utils: Reimplement util.GetRandomString to avoid modulo bias
    Alerting: Fix matching labels with spaces in their values
    Dashboard: Fix applying timezone to datetime variables
    Dashboard: Fix panel description event triggering every time
    panel is rendered
    Tempo: Fix get label values based on CoreApp type
    Heatmap: Fix log scale editor
    Dashboard: Fix disappearing panel when viewed panel is
    refreshed
    Prometheus: Fix bug in creating autocomplete queries with
    labels
    Prometheus: Fix Query Inspector expression range value
    Alerting: Fix migration failing if alert_configuration table is
    not empty
    InfluxDB: Fix querying retention policies on flux mode
- Update to version 9.5.6:
  * Bug fixes
    Dashboard: Fix library panels in collapsed rows not getting
    updated
    Auth: Add and document option for enabling email lookup</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708603200">- Update to version 9.5.16:
  * [SECURITY] CVE-2023-6152: Add email verification when updating
    user email (bsc#1219912)
  * [BUGFIX] Annotations: Split cleanup into separate queries and
    deletes to avoid deadlocks on MySQL
- Update to version 9.5.15:
  * [FEATURE] Alerting: Attempt to retry retryable errors
- Update to version 9.5.14:
  * [BUGFIX] Alerting: Fix state manager to not keep
    datasource_uid and ref_id labels in state after Error
  * [BUGFIX] Transformations: Config overrides being lost when
    config from query transform is applied
  * [BUGFIX] LDAP: Fix enable users on successfull login
- Update to version 9.5.13:
  * [BUGFIX] BrowseDashboards: Only remember the most recent
    expanded folder
  * [BUGFIX] Licensing: Pass func to update env variables when
    starting plugin
- Update to version 9.5.12:
  * [FEATURE] Azure: Add support for Workload Identity
    authentication
- Update to version 9.5.9:
  * [FEATURE] SSE: Fix DSNode to not panic when response has empty
    response
  * [FEATURE] Prometheus: Handle the response with different field
    key order
  * [BUGFIX] LDAP: Fix user disabling</changelog>
  <changelog author="witold.bedyk@suse.com" date="1709899200">- Require Go 1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1712318400">- Packaging improvements:
  * Changed deprecated `disabled` service mode to `manual`
  * Drop golang-packaging macros
  * Drop explicit mod=vendor as it is enabled automatically
- Update to version 9.5.18:
  * [SECURITY] CVE-2024-1313: Require same organisation when
    deleting snapshots (bsc#1222155)
- Update to version 9.5.17:
  * [FEATURE] Alerting: Backport use Alertmanager API v2</changelog>
</package>
<package pkgid="383e076e437e516965e2a382f634e07652ab160ec144508d82f706aac9237a22" name="grafana" arch="s390x">
  <version epoch="0" ver="9.5.18" rel="150200.3.56.1"/>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753 (bsc#1218843).
    Chore: Fix CVE-2021-3807 (bsc#1192154).
    Chore: Fix CVE-2021-3918 (bsc#1192696).
    Chore: Fix CVE-2021-43138 (bsc#1200480).
    Chore: Fix CVE-2022-0155 (bsc#1218844).
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683201">- Update to 9.5.1
  * Bug fixes
    Loki Variable Query Editor: Fix bug when the query is updated
    Expressions: Fix expression load with legacy UID -100</changelog>
  <changelog author="witold.bedyk@suse.com" date="1687521600">- Update to version 9.5.5:
  * Bug fixes
    Security: Fix authentication bypass using Azure AD OAuth
    (bsc#1212641, CVE-2023-3128, jsc#PED-3694).
    Auth: Show invite button if disable login form is set to false.
    Azure: Fix Kusto auto-completion for Azure datasources.
    RBAC: Remove legacy AC editor and admin role on new dashboard
    route.
    API: Revert allowing editors to access GET /datasources.
    Settings: Add ability to override skip_org_role_sync with Env
    variables.
- Update to version 9.5.3:
  * Bug fixes
    Query: Prevent crash while executing concurrent mixed queries
    (bsc#1212099, CVE-2023-2801).
    Alerting: Require alert.notifications:write permissions to test
    receivers and templates (bsc#1212100, CVE-2023-2183).
- Update to version 9.5.2:
  * Bug fixes
    Alerting: Scheduler use rule fingerprint instead of version.
    Explore: Update table min height.
    DataLinks: Encoded URL fixed.
    TimeSeries: Fix leading null-fill for missing intervals.
    Dashboard: Revert fixed header shown on mobile devices in the
    new panel header.
    PostgreSQL: Fix TLS certificate issue by downgrading lib/pq.
    Provisioning: Fix provisioning issues with legacy alerting and
    data source permissions.
    Alerting: Fix misleading status code in provisioning API.
    Loki: Fix log samples using `instant` queries.
    Panel Header: Implement new Panel Header on Angular Panels.
    Azure Monitor: Fix bug that was not showing resources for
    certain locations.
    Alerting: Fix panic when reparenting receivers to groups
    following an attempted rename via Provisioning.
    Cloudwatch Logs: Clarify Cloudwatch Logs Limits.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1692792000">- Update to version 9.5.8:
  * Features and enhancements
    GenericOAuth: Set sub as auth id
  * Bug fixes:
    DataSourceProxy: Fix url validation error handling
- Update to version 9.5.7:
  * Features and enhancements
    Alerting: Sort NumberCaptureValues in EvaluationString
    Alerting: Improve performance of matching captures
    Alerting: No longer silence paused alerts during legacy
    migration
    Alerting: Remove and revert flag alertingBigTransactions
    Alerting: Migrate unknown NoData\Error settings to the default
    Tracing: supply Grafana build version
    Tempo: Escape regex-sensitive characters in span name before
    building promql query
  * Bug fixes:
    Plugins: Only configure plugin proxy transport once
    Alerting: Fix unique violation when updating rule group with
    title chains/cycles
    Prometheus: Version detect bug
    Prometheus: Fix heatmap format with no data
    Database: Change getExistingDashboardByTitleAndFolder to get
    dashboard by title, not slug
    Alerting: Convert 'Both' type Prometheus queries to 'Range' in
    migration
    SQLStore: Fix Postgres dialect treating "false" migrator
    default as true
    Alerting: Support newer http_config struct
    InfluxDB: Interpolate retention policies
    StatusHistory: Fix rendering of value-mapped null
    Alerting: Fix provenance guard checks for Alertmanager
    configuration to not cause panic when compared nested
    objects
    AnonymousAuth: Fix concurrent read-write crash
    AzureMonitor: Ensure legacy properties containing template
    variables are correctly migrated
    Explore: Remove data source onboarding page
    Dashboard: Re-align Save form
    Azure Monitor: Fix bug that did not show alert rule preview
    Histogram: Respect min/max panel settings for x-axis
    Heatmap: Fix color rendering for value ranges &lt; 1
    Heatmap: Handle unsorted timestamps in calculate mode
    Google Cloud Monitor: Fix mem usage for dropdown
    AzureMonitor: Fix logs query multi-resource and timespan values
    Utils: Reimplement util.GetRandomString to avoid modulo bias
    Alerting: Fix matching labels with spaces in their values
    Dashboard: Fix applying timezone to datetime variables
    Dashboard: Fix panel description event triggering every time
    panel is rendered
    Tempo: Fix get label values based on CoreApp type
    Heatmap: Fix log scale editor
    Dashboard: Fix disappearing panel when viewed panel is
    refreshed
    Prometheus: Fix bug in creating autocomplete queries with
    labels
    Prometheus: Fix Query Inspector expression range value
    Alerting: Fix migration failing if alert_configuration table is
    not empty
    InfluxDB: Fix querying retention policies on flux mode
- Update to version 9.5.6:
  * Bug fixes
    Dashboard: Fix library panels in collapsed rows not getting
    updated
    Auth: Add and document option for enabling email lookup</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708603200">- Update to version 9.5.16:
  * [SECURITY] CVE-2023-6152: Add email verification when updating
    user email (bsc#1219912)
  * [BUGFIX] Annotations: Split cleanup into separate queries and
    deletes to avoid deadlocks on MySQL
- Update to version 9.5.15:
  * [FEATURE] Alerting: Attempt to retry retryable errors
- Update to version 9.5.14:
  * [BUGFIX] Alerting: Fix state manager to not keep
    datasource_uid and ref_id labels in state after Error
  * [BUGFIX] Transformations: Config overrides being lost when
    config from query transform is applied
  * [BUGFIX] LDAP: Fix enable users on successfull login
- Update to version 9.5.13:
  * [BUGFIX] BrowseDashboards: Only remember the most recent
    expanded folder
  * [BUGFIX] Licensing: Pass func to update env variables when
    starting plugin
- Update to version 9.5.12:
  * [FEATURE] Azure: Add support for Workload Identity
    authentication
- Update to version 9.5.9:
  * [FEATURE] SSE: Fix DSNode to not panic when response has empty
    response
  * [FEATURE] Prometheus: Handle the response with different field
    key order
  * [BUGFIX] LDAP: Fix user disabling</changelog>
  <changelog author="witold.bedyk@suse.com" date="1709899200">- Require Go 1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1712318400">- Packaging improvements:
  * Changed deprecated `disabled` service mode to `manual`
  * Drop golang-packaging macros
  * Drop explicit mod=vendor as it is enabled automatically
- Update to version 9.5.18:
  * [SECURITY] CVE-2024-1313: Require same organisation when
    deleting snapshots (bsc#1222155)
- Update to version 9.5.17:
  * [FEATURE] Alerting: Backport use Alertmanager API v2</changelog>
</package>
<package pkgid="4d199c7f96dfe267347f4838669736bf64f63f77b579d7abe6393f8799d8d88e" name="grafana" arch="src">
  <version epoch="0" ver="9.5.18" rel="150200.3.56.1"/>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753 (bsc#1218843).
    Chore: Fix CVE-2021-3807 (bsc#1192154).
    Chore: Fix CVE-2021-3918 (bsc#1192696).
    Chore: Fix CVE-2021-43138 (bsc#1200480).
    Chore: Fix CVE-2022-0155 (bsc#1218844).
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683201">- Update to 9.5.1
  * Bug fixes
    Loki Variable Query Editor: Fix bug when the query is updated
    Expressions: Fix expression load with legacy UID -100</changelog>
  <changelog author="witold.bedyk@suse.com" date="1687521600">- Update to version 9.5.5:
  * Bug fixes
    Security: Fix authentication bypass using Azure AD OAuth
    (bsc#1212641, CVE-2023-3128, jsc#PED-3694).
    Auth: Show invite button if disable login form is set to false.
    Azure: Fix Kusto auto-completion for Azure datasources.
    RBAC: Remove legacy AC editor and admin role on new dashboard
    route.
    API: Revert allowing editors to access GET /datasources.
    Settings: Add ability to override skip_org_role_sync with Env
    variables.
- Update to version 9.5.3:
  * Bug fixes
    Query: Prevent crash while executing concurrent mixed queries
    (bsc#1212099, CVE-2023-2801).
    Alerting: Require alert.notifications:write permissions to test
    receivers and templates (bsc#1212100, CVE-2023-2183).
- Update to version 9.5.2:
  * Bug fixes
    Alerting: Scheduler use rule fingerprint instead of version.
    Explore: Update table min height.
    DataLinks: Encoded URL fixed.
    TimeSeries: Fix leading null-fill for missing intervals.
    Dashboard: Revert fixed header shown on mobile devices in the
    new panel header.
    PostgreSQL: Fix TLS certificate issue by downgrading lib/pq.
    Provisioning: Fix provisioning issues with legacy alerting and
    data source permissions.
    Alerting: Fix misleading status code in provisioning API.
    Loki: Fix log samples using `instant` queries.
    Panel Header: Implement new Panel Header on Angular Panels.
    Azure Monitor: Fix bug that was not showing resources for
    certain locations.
    Alerting: Fix panic when reparenting receivers to groups
    following an attempted rename via Provisioning.
    Cloudwatch Logs: Clarify Cloudwatch Logs Limits.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1692792000">- Update to version 9.5.8:
  * Features and enhancements
    GenericOAuth: Set sub as auth id
  * Bug fixes:
    DataSourceProxy: Fix url validation error handling
- Update to version 9.5.7:
  * Features and enhancements
    Alerting: Sort NumberCaptureValues in EvaluationString
    Alerting: Improve performance of matching captures
    Alerting: No longer silence paused alerts during legacy
    migration
    Alerting: Remove and revert flag alertingBigTransactions
    Alerting: Migrate unknown NoData\Error settings to the default
    Tracing: supply Grafana build version
    Tempo: Escape regex-sensitive characters in span name before
    building promql query
  * Bug fixes:
    Plugins: Only configure plugin proxy transport once
    Alerting: Fix unique violation when updating rule group with
    title chains/cycles
    Prometheus: Version detect bug
    Prometheus: Fix heatmap format with no data
    Database: Change getExistingDashboardByTitleAndFolder to get
    dashboard by title, not slug
    Alerting: Convert 'Both' type Prometheus queries to 'Range' in
    migration
    SQLStore: Fix Postgres dialect treating "false" migrator
    default as true
    Alerting: Support newer http_config struct
    InfluxDB: Interpolate retention policies
    StatusHistory: Fix rendering of value-mapped null
    Alerting: Fix provenance guard checks for Alertmanager
    configuration to not cause panic when compared nested
    objects
    AnonymousAuth: Fix concurrent read-write crash
    AzureMonitor: Ensure legacy properties containing template
    variables are correctly migrated
    Explore: Remove data source onboarding page
    Dashboard: Re-align Save form
    Azure Monitor: Fix bug that did not show alert rule preview
    Histogram: Respect min/max panel settings for x-axis
    Heatmap: Fix color rendering for value ranges &lt; 1
    Heatmap: Handle unsorted timestamps in calculate mode
    Google Cloud Monitor: Fix mem usage for dropdown
    AzureMonitor: Fix logs query multi-resource and timespan values
    Utils: Reimplement util.GetRandomString to avoid modulo bias
    Alerting: Fix matching labels with spaces in their values
    Dashboard: Fix applying timezone to datetime variables
    Dashboard: Fix panel description event triggering every time
    panel is rendered
    Tempo: Fix get label values based on CoreApp type
    Heatmap: Fix log scale editor
    Dashboard: Fix disappearing panel when viewed panel is
    refreshed
    Prometheus: Fix bug in creating autocomplete queries with
    labels
    Prometheus: Fix Query Inspector expression range value
    Alerting: Fix migration failing if alert_configuration table is
    not empty
    InfluxDB: Fix querying retention policies on flux mode
- Update to version 9.5.6:
  * Bug fixes
    Dashboard: Fix library panels in collapsed rows not getting
    updated
    Auth: Add and document option for enabling email lookup</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708603200">- Update to version 9.5.16:
  * [SECURITY] CVE-2023-6152: Add email verification when updating
    user email (bsc#1219912)
  * [BUGFIX] Annotations: Split cleanup into separate queries and
    deletes to avoid deadlocks on MySQL
- Update to version 9.5.15:
  * [FEATURE] Alerting: Attempt to retry retryable errors
- Update to version 9.5.14:
  * [BUGFIX] Alerting: Fix state manager to not keep
    datasource_uid and ref_id labels in state after Error
  * [BUGFIX] Transformations: Config overrides being lost when
    config from query transform is applied
  * [BUGFIX] LDAP: Fix enable users on successfull login
- Update to version 9.5.13:
  * [BUGFIX] BrowseDashboards: Only remember the most recent
    expanded folder
  * [BUGFIX] Licensing: Pass func to update env variables when
    starting plugin
- Update to version 9.5.12:
  * [FEATURE] Azure: Add support for Workload Identity
    authentication
- Update to version 9.5.9:
  * [FEATURE] SSE: Fix DSNode to not panic when response has empty
    response
  * [FEATURE] Prometheus: Handle the response with different field
    key order
  * [BUGFIX] LDAP: Fix user disabling</changelog>
  <changelog author="witold.bedyk@suse.com" date="1709899200">- Require Go 1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1712318400">- Packaging improvements:
  * Changed deprecated `disabled` service mode to `manual`
  * Drop golang-packaging macros
  * Drop explicit mod=vendor as it is enabled automatically
- Update to version 9.5.18:
  * [SECURITY] CVE-2024-1313: Require same organisation when
    deleting snapshots (bsc#1222155)
- Update to version 9.5.17:
  * [FEATURE] Alerting: Backport use Alertmanager API v2</changelog>
</package>
<package pkgid="e35c51974fc7aae6aa1fa5f4595927e1aceda95637356736d328bdfb18ffd8e5" name="grafana" arch="x86_64">
  <version epoch="0" ver="9.5.18" rel="150200.3.56.1"/>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753 (bsc#1218843).
    Chore: Fix CVE-2021-3807 (bsc#1192154).
    Chore: Fix CVE-2021-3918 (bsc#1192696).
    Chore: Fix CVE-2021-43138 (bsc#1200480).
    Chore: Fix CVE-2022-0155 (bsc#1218844).
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683201">- Update to 9.5.1
  * Bug fixes
    Loki Variable Query Editor: Fix bug when the query is updated
    Expressions: Fix expression load with legacy UID -100</changelog>
  <changelog author="witold.bedyk@suse.com" date="1687521600">- Update to version 9.5.5:
  * Bug fixes
    Security: Fix authentication bypass using Azure AD OAuth
    (bsc#1212641, CVE-2023-3128, jsc#PED-3694).
    Auth: Show invite button if disable login form is set to false.
    Azure: Fix Kusto auto-completion for Azure datasources.
    RBAC: Remove legacy AC editor and admin role on new dashboard
    route.
    API: Revert allowing editors to access GET /datasources.
    Settings: Add ability to override skip_org_role_sync with Env
    variables.
- Update to version 9.5.3:
  * Bug fixes
    Query: Prevent crash while executing concurrent mixed queries
    (bsc#1212099, CVE-2023-2801).
    Alerting: Require alert.notifications:write permissions to test
    receivers and templates (bsc#1212100, CVE-2023-2183).
- Update to version 9.5.2:
  * Bug fixes
    Alerting: Scheduler use rule fingerprint instead of version.
    Explore: Update table min height.
    DataLinks: Encoded URL fixed.
    TimeSeries: Fix leading null-fill for missing intervals.
    Dashboard: Revert fixed header shown on mobile devices in the
    new panel header.
    PostgreSQL: Fix TLS certificate issue by downgrading lib/pq.
    Provisioning: Fix provisioning issues with legacy alerting and
    data source permissions.
    Alerting: Fix misleading status code in provisioning API.
    Loki: Fix log samples using `instant` queries.
    Panel Header: Implement new Panel Header on Angular Panels.
    Azure Monitor: Fix bug that was not showing resources for
    certain locations.
    Alerting: Fix panic when reparenting receivers to groups
    following an attempted rename via Provisioning.
    Cloudwatch Logs: Clarify Cloudwatch Logs Limits.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1692792000">- Update to version 9.5.8:
  * Features and enhancements
    GenericOAuth: Set sub as auth id
  * Bug fixes:
    DataSourceProxy: Fix url validation error handling
- Update to version 9.5.7:
  * Features and enhancements
    Alerting: Sort NumberCaptureValues in EvaluationString
    Alerting: Improve performance of matching captures
    Alerting: No longer silence paused alerts during legacy
    migration
    Alerting: Remove and revert flag alertingBigTransactions
    Alerting: Migrate unknown NoData\Error settings to the default
    Tracing: supply Grafana build version
    Tempo: Escape regex-sensitive characters in span name before
    building promql query
  * Bug fixes:
    Plugins: Only configure plugin proxy transport once
    Alerting: Fix unique violation when updating rule group with
    title chains/cycles
    Prometheus: Version detect bug
    Prometheus: Fix heatmap format with no data
    Database: Change getExistingDashboardByTitleAndFolder to get
    dashboard by title, not slug
    Alerting: Convert 'Both' type Prometheus queries to 'Range' in
    migration
    SQLStore: Fix Postgres dialect treating "false" migrator
    default as true
    Alerting: Support newer http_config struct
    InfluxDB: Interpolate retention policies
    StatusHistory: Fix rendering of value-mapped null
    Alerting: Fix provenance guard checks for Alertmanager
    configuration to not cause panic when compared nested
    objects
    AnonymousAuth: Fix concurrent read-write crash
    AzureMonitor: Ensure legacy properties containing template
    variables are correctly migrated
    Explore: Remove data source onboarding page
    Dashboard: Re-align Save form
    Azure Monitor: Fix bug that did not show alert rule preview
    Histogram: Respect min/max panel settings for x-axis
    Heatmap: Fix color rendering for value ranges &lt; 1
    Heatmap: Handle unsorted timestamps in calculate mode
    Google Cloud Monitor: Fix mem usage for dropdown
    AzureMonitor: Fix logs query multi-resource and timespan values
    Utils: Reimplement util.GetRandomString to avoid modulo bias
    Alerting: Fix matching labels with spaces in their values
    Dashboard: Fix applying timezone to datetime variables
    Dashboard: Fix panel description event triggering every time
    panel is rendered
    Tempo: Fix get label values based on CoreApp type
    Heatmap: Fix log scale editor
    Dashboard: Fix disappearing panel when viewed panel is
    refreshed
    Prometheus: Fix bug in creating autocomplete queries with
    labels
    Prometheus: Fix Query Inspector expression range value
    Alerting: Fix migration failing if alert_configuration table is
    not empty
    InfluxDB: Fix querying retention policies on flux mode
- Update to version 9.5.6:
  * Bug fixes
    Dashboard: Fix library panels in collapsed rows not getting
    updated
    Auth: Add and document option for enabling email lookup</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708603200">- Update to version 9.5.16:
  * [SECURITY] CVE-2023-6152: Add email verification when updating
    user email (bsc#1219912)
  * [BUGFIX] Annotations: Split cleanup into separate queries and
    deletes to avoid deadlocks on MySQL
- Update to version 9.5.15:
  * [FEATURE] Alerting: Attempt to retry retryable errors
- Update to version 9.5.14:
  * [BUGFIX] Alerting: Fix state manager to not keep
    datasource_uid and ref_id labels in state after Error
  * [BUGFIX] Transformations: Config overrides being lost when
    config from query transform is applied
  * [BUGFIX] LDAP: Fix enable users on successfull login
- Update to version 9.5.13:
  * [BUGFIX] BrowseDashboards: Only remember the most recent
    expanded folder
  * [BUGFIX] Licensing: Pass func to update env variables when
    starting plugin
- Update to version 9.5.12:
  * [FEATURE] Azure: Add support for Workload Identity
    authentication
- Update to version 9.5.9:
  * [FEATURE] SSE: Fix DSNode to not panic when response has empty
    response
  * [FEATURE] Prometheus: Handle the response with different field
    key order
  * [BUGFIX] LDAP: Fix user disabling</changelog>
  <changelog author="witold.bedyk@suse.com" date="1709899200">- Require Go 1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1712318400">- Packaging improvements:
  * Changed deprecated `disabled` service mode to `manual`
  * Drop golang-packaging macros
  * Drop explicit mod=vendor as it is enabled automatically
- Update to version 9.5.18:
  * [SECURITY] CVE-2024-1313: Require same organisation when
    deleting snapshots (bsc#1222155)
- Update to version 9.5.17:
  * [FEATURE] Alerting: Backport use Alertmanager API v2</changelog>
</package>
<package pkgid="9a3f98a44bb1ed8eba8f3d1da9f374e45e528a50963a8c6bb8953bb47f8ed99c" name="grafana-ha-cluster-dashboards" arch="noarch">
  <version epoch="0" ver="1.1.0+git.1605027022.a84d536" rel="150000.1.13.1"/>
  <changelog author="stefano.torresi@suse.com" date="1591963200">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1594728000">- Release 1.0.1
  * fixed datasource variable initialization
  * minor Grafana 7 compatibility fixes</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.2
  * update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.3 (jsc#SLE-10545)
  * don't use require grafana, use recommends
  * fix permissions accordingly
  * fix minor typo on dashboard spec file</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604923200">- Release 1.1.0
  * Split provider file to own package</changelog>
</package>
<package pkgid="ee3a4bfc8e3c3896b0ed483230daee25abe09d3ec7312ae00cba3c28ad8dd879" name="grafana-ha-cluster-dashboards" arch="src">
  <version epoch="0" ver="1.1.0+git.1605027022.a84d536" rel="150000.1.13.1"/>
  <changelog author="stefano.torresi@suse.com" date="1591963200">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1594728000">- Release 1.0.1
  * fixed datasource variable initialization
  * minor Grafana 7 compatibility fixes</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.2
  * update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.3 (jsc#SLE-10545)
  * don't use require grafana, use recommends
  * fix permissions accordingly
  * fix minor typo on dashboard spec file</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604923200">- Release 1.1.0
  * Split provider file to own package</changelog>
</package>
<package pkgid="375cd81734de46604894d5aca54d53eb37dbfaafb75732f7de5b94e4f069d467" name="grafana-sap-netweaver-dashboards" arch="noarch">
  <version epoch="0" ver="1.0.3+git.1601889366.9f71957" rel="150000.1.13.1"/>
  <changelog author="stefano.torresi@suse.com" date="1594814400">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.1
  * Update schema to Grafana 7
  * Update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.2
  * Remove useless macro and fix typo in the meanwhile</changelog>
  <changelog author="dmaiocchi@suse.com" date="1601640000">- Release 1.0.3
  * Add variable for prometheus datasource (bsc#1177229)</changelog>
</package>
<package pkgid="b10322f0403904a3e7e38e33e798981ada1e3eb1ca4865eb1c2d4619761d1993" name="grafana-sap-netweaver-dashboards" arch="src">
  <version epoch="0" ver="1.0.3+git.1601889366.9f71957" rel="150000.1.13.1"/>
  <changelog author="stefano.torresi@suse.com" date="1594814400">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.1
  * Update schema to Grafana 7
  * Update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.2
  * Remove useless macro and fix typo in the meanwhile</changelog>
  <changelog author="dmaiocchi@suse.com" date="1601640000">- Release 1.0.3
  * Add variable for prometheus datasource (bsc#1177229)</changelog>
</package>
<package pkgid="c27b15cae1266835bdc11c1556e2539c94b73d6c25d6fdadc410c861d519fc97" name="grafana-sap-providers" arch="noarch">
  <version epoch="0" ver="1.1" rel="150000.1.10.1"/>
  <changelog author="stefano.torresi@suse.com" date="1592913600">- First release</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Version 1.1:
  * use recommends instead of requires on grafana (jsc#10545)
  * change attributes on provisioning dir, otherwise grafana fails to start
  * create grafana/user groups to fix permissions</changelog>
</package>
<package pkgid="3d52f1f47a1a845ba5c4bed9e6bb82d32e68c449101f0b47098c1a8ee4791432" name="grafana-sap-providers" arch="src">
  <version epoch="0" ver="1.1" rel="150000.1.10.1"/>
  <changelog author="stefano.torresi@suse.com" date="1592913600">- First release</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Version 1.1:
  * use recommends instead of requires on grafana (jsc#10545)
  * change attributes on provisioning dir, otherwise grafana fails to start
  * create grafana/user groups to fix permissions</changelog>
</package>
<package pkgid="63512e1432cd2072c45b960e2dfaa26f34ed2bd10ed6a6b3b60587889f2bce2a" name="grafana-sleha-provider" arch="noarch">
  <version epoch="0" ver="1.1.0+git.1605027022.a84d536" rel="150000.1.13.1"/>
  <changelog author="stefano.torresi@suse.com" date="1591963200">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1594728000">- Release 1.0.1
  * fixed datasource variable initialization
  * minor Grafana 7 compatibility fixes</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.2
  * update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.3 (jsc#SLE-10545)
  * don't use require grafana, use recommends
  * fix permissions accordingly
  * fix minor typo on dashboard spec file</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604923200">- Release 1.1.0
  * Split provider file to own package</changelog>
</package>
<package pkgid="996873967c610ada29e8ce466801e92903c6a4f155e30f4bfdbe6c965d7f54a0" name="groovy-bootstrap" arch="noarch">
  <version epoch="0" ver="2.4.21" rel="150200.3.12.5"/>
  <changelog author="fstrba@suse.com" date="1574078400">- Initial packaging of binary boostrap version of gradle 4.4.1
- This package is only to be able to bootstrap gradle and should
  not be used for other purposes</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Regenerate to include the new slf4j-api.jar in the tarball</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Regenerate from the non-bootstrap build against objectweb-asm 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1575892800">- Regenerate to account for groovy upgrade to 2.4.16 and for
  changes allowing to use gradle with java 11</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Regenerate to account for groovy upgrade to 2.4.21</changelog>
  <changelog author="fstrba@suse.com" date="1620820800">- Regenerate to account for guava upgrade to 30.1.1</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Regenerate to account for aqute-bnd upgrade to 5.1.1 and
  related changes in other libraries</changelog>
  <changelog author="fstrba@suse.com" date="1647259200">- Regenerate to account for maven-resolver upgrade to 1.7.3
  and the new added maven-resolver-named-locks artifact</changelog>
  <changelog author="fstrba@suse.com" date="1651320000">- The org.jboss.netty:netty artifact does not exist any more under
  compatibility versions</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Adapt to the change in jline/jansi dependencies of gradle</changelog>
  <changelog author="fstrba@suse.com" date="1653048000">- Modify the launcher so that gradle-bootstrap can work with
  Java 17</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Regenerate to account for changes in gradle and groovy packages</changelog>
  <changelog author="fstrba@suse.com" date="1709899200">- Add missing dependency of aopalliance</changelog>
  <changelog author="fstrba@suse.com" date="1711454400">- Regenerate to account for integration of a backport for
  bsc#1145903, CVE-2019-15052</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Regenerate to account for the new plexus-xml dependency</changelog>
</package>
<package pkgid="31d819f97747c16afbe9e5ef58b5ace4d5f49f546c2f1ef876f334f23337daa3" name="gstreamer-plugins-base" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="d46dbd0b7c223aff6dec3cd1ce9f284d2ccfa964c506b16c123709ee4a3dd217" name="gstreamer-plugins-base" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="cbca809358968ad3eca48b292d5216949de8f64351044989c7083008b08725c0" name="gstreamer-plugins-base" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="db6d6851f0cf6ebdc94810a49a5c2230fee05d1d85319b2234824b8b2cad7868" name="gstreamer-plugins-base" arch="src">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="a11305b6479c3fe1993c5e3e4ea2c6ceecfe4f6a30c6459b0c2bf2a91c617e39" name="gstreamer-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="45779d7f818a789745a0a4e75ac3aed00d4c6a889cf01ee95dcc4c914b64a65e" name="gstreamer-plugins-base-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="735631b9e7a5f1f19c04585760f8d24dd676e9a2e5b98867df8e5a012de689a9" name="gstreamer-plugins-base-devel" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="227549e30f88784e9538ce7ec0b312da0c163d935c03e95a6483bc65f931301b" name="gstreamer-plugins-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="160ed1284fdb9695ed9a39b393771cd20d5d76ade68e78135bc898535274a50e" name="gstreamer-plugins-base-devel" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="8993759248ff4ecb99f22336eb43ce881f13508621270c8c381c3183ac3fe33a" name="gstreamer-plugins-base-devel" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="8d9380bf5ffbe76c15de4dd6f6db9dff7e8fb51f76e2f4c6d304d1cbd547fe13" name="gstreamer-plugins-base-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="67176b1b5abf533c897b2629ca907f17a44157e8308968dadf4c0a6dfb99c9de" name="gstreamer-plugins-base-lang" arch="noarch">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="0779bf154f5b825bcb6e161eb45f3e2fb532a040ac52e7a72afbfd801ad5a0bb" name="gtk4" arch="src">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="20507ced1611985804c919afae96055d3fe84633961da5bec8a3bdb65c9e0a52" name="gtk4-branding-upstream" arch="noarch">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="dfc9c1087a65f6391992cb9c93a7730b675da975a7a392b7c7658b7060122bda" name="gtk4-devel" arch="aarch64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="80e9e67a0f5b98e3e2fe6f896889e2d3c0ef7b81041e647342b6361c7bbd0a53" name="gtk4-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="d0c7011676b2dba768afa72e774a6d0f214a04f43b676611bbf6dc60d29960f9" name="gtk4-devel" arch="s390x">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="4746e1d01415770c3b9fb2dbbdf1489143065f79a42ec98bd799921af4e08186" name="gtk4-devel" arch="x86_64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="1a5cce7a4ea812460979afb0bc164cad4f1463bbe78604a2da1f8383c496ac71" name="gtk4-devel-tools" arch="aarch64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="4968c39f655d3fe24b5ea76b367758a834c95535452f8682f54f68b6cfb53a1e" name="gtk4-devel-tools" arch="ppc64le">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="cbb0ad3950e541fd911b265163d07cd541a56fdc4c075af687e2a8cc39018658" name="gtk4-devel-tools" arch="s390x">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="440787fde33abb03281e660164e25667b9f4ab99148e4c7f3a963754c4b10c35" name="gtk4-devel-tools" arch="x86_64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="84472ad9c1438e97e802eaf1597a064a38abb93c8ce3d6a7408ccdabd4de183a" name="gtk4-docs" arch="noarch">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="147500f89fad110fb4cf4f46d78635ebaa3c0df48888447d8fef6abde46c5598" name="gtk4-lang" arch="noarch">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="e3887ebb3dfe40cad62e8119d73840958ddf4866bc5d64644a7d1a6c021d9dee" name="gtk4-schema" arch="noarch">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="aa35fdc7b0d8de755d45b8d23da55e65d67552dc91cafd6b4cfd5bb18fcff11b" name="gtk4-tools" arch="aarch64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="3ba256c6e5c92a85427bf7d1edd227d7558f1724b7fae114f0859d75f6d38f90" name="gtk4-tools" arch="ppc64le">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="c8660eec80c7fb66c744dbf7b3350f130d108e4b06f0ece316e3de12db704537" name="gtk4-tools" arch="s390x">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="7734daec5a7d56df66c09228729f8d24e96ec19a2dd8f83f25b4bbc6d5b0aaf2" name="gtk4-tools" arch="x86_64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="31e388ae89ea2e7c08cedc765af2fd3becd3cb1f6d3d8c186cb7cccae19c06f1" name="guava" arch="noarch">
  <version epoch="0" ver="33.1.0" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1555070400">- Initial packaging of guava 25.0</changelog>
  <changelog author="fstrba@suse.com" date="1570708800">- Added patch:
  * guava-25.0-java8compat.patch
    + Avoid callingoverridden methods with covariant return types
    for java.nio.ByteBuffer and java.nio.CharBuffer, which were
    introduced in Java 9
    + This allows us to produce with Java &gt;= 9 binaries that are
    compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1574424000">- Build the package with ant in order to prevent build cycles
  * using a generated and customized ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1575460800">- Avoid version-less dependencies that can cause problems with
  some tools</changelog>
  <changelog author="fstrba@suse.com" date="1620648000">- Upgrade to guava 30.1.1
  * Fixes:
    + cache: Fixed compatibility between asMap().compute(...)
    and a load.
    + cache: Added @CheckReturnValue to some APIs.
    + collect: Added @DoNotCall to the mutator methods on immutable
    types
    + hash: Removed @Beta from HashCode.
    + io: Removed @Beta from CountingOutputStream.
  * fixes bsc#1179926, CVE-2020-8908: temp directory creation
    vulnerability in Guava versions prior to 30.0
- Removed patch:
  * guava-25.0-java8compat.patch
    + the compatibility is handled in the upstream code
- Added patch:
  * donotmock.patch
    + patch @DoNotMock annotation occurrences in order to put them
    in a format that our regex is able to identify and kill</changelog>
  <changelog author="fstrba@suse.com" date="1647000000">- Remove parent reference from ALL distributed pom files</changelog>
  <changelog author="fstrba@suse.com" date="1652875200">- Upgrade to guava 31.1
  * Fixes:
    + base: Deprecated the Throwables methods lazyStackTrace and
    lazyStackTraceIsLazy. They are no longer useful on any current
    platform.
    + collect: Added a new method
    ImmutableMap.Builder.buildKeepingLast(), which keeps the last
    value for any given key rather than throwing an exception when
    a key appears more than once.
    + collect: As a side-effect of the buildKeepingLast() change,
    the idiom
    ImmutableList.copyOf(Maps.transformValues(map, function))
    may produce different results if function has side-effects.
    + hash: Added Hashing.fingerprint2011().
    + io: Changed ByteStreams.nullOutputStream() to follow the
    contract of OutputStream.write by throwing an exception if
    the range of bytes is out of bounds.
    + net: Added @CheckReturnValue to the package (with a few
    exceptions).
    + net: Added HttpHeaders constant for
    Access-Control-Allow-Private-Network.
    + util.concurrent: Added accumulate/update methods for
    AtomicDouble and AtomicDoubleArray.
  * APIs promoted from @Beta:
    + base: Throwables methods getCausalChain and getCauseAs
    + collect: Streams methods mapWithIndex and findLast
    + collect: the remaining methods in Comparators: min, max,
    lexicographical, emptiesFirst, emptiesLast, isInOrder,
    isInStrictOrder
    + escape: various APIs
    + io: various APIs in Files
    + net: various APIs
    + reflect: various APIs
    + testlib: various APIs
    + util.concurrent: AsyncCallable, ListenableScheduledFuture,
    and ClosingFuture
    + util.concurrent: ExecutionSequencer,
    MoreExecutors.newSequentialExecutor, and Monitor
    + util.concurrent: Futures methods: submit, submitAsync,
    scheduleAsync, nonCancellationPropagating, inCompletionOrder
    + util.concurrent: Uninterruptibles:
    awaitTerminationUninterruptibly and the Duration overloads in
    the class
    + util.concurrent: the FluentFuture type, its factory methods,
    and addCallback
  * Remove the hack of removing annotations, since we have now
    all the required dependencies packaged
- Removed patch:
  * donotmock.patch
    + hack not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1686830400">- Upgrade to guava 32.0.1
  * Security fixes:
    + Reimplemented Files.createTempDir and FileBackedOutputStream
    to further address CVE-2020-8908 (#4011, bsc#1179926) and
    CVE-2023-2976 (#2575, bsc#1212401)
  * Fixes:
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows, which broke as part of the security fix in release
    32.0.0
    + Removed @Beta from almost all APIs. Most of the remaining
    @Beta APIs are in graph and hash.
    + Enhanced the Guava jar to include Proguard configurations that
    are picked up automatically by the Android Gradle Plugin. This
    should help with warnings that were promoted to errors in
    Android Gradle Plugin 8.x.
    + Enhanced the Guava jar to include information about method
    parameters in its class files. If you use static analyzers
    that look at method-parameter names, you may see new warnings
    or errors if they are now able to detect mismatches. But
    mostly, you may see better tooltips and autocompletion in
    DEs.
    + Improved nullness annotations on a few classes.
    + Modified classes with "serial proxies" to declare
    exception-throwing readObject methods, in accordance with best
    practice.
    + collect: Fixed Maps.newHashMapWithExpectedSize to stop
    allocating maps that were larger than they needed to be.
    + collect: Made various APIs work J2CL:
    Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset,
    CollectorTester. Previously, the APIs were present but failed
    at runtime.
    + collect: Optimized memory usage for Interner and MapMaker.
    + graph: Changed directed graphs to reject attempts to add
    undirected edges.
    + io: Added BaseEncoding.ignoreCase() to support
    case-insensitive decoding.
    + net: Added HttpHeaders constants:
    ~ No-Vary-Search
    ~ Sec-CH-DPR
    ~ Sec-CH-UA-Wow64
    ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height
    ~ Supports-Loading-Mode
    + net: Added the MediaType constant for JWT.
    + primitives: Added rotate() for arrays of all primitive types.
    + util.concurrent: Changed AbstractFuture to run
    interruptTask() just before afterDone(). Until this change, it
    ran slightly earlier than that: We used to run it before
    unblocking any pending get() calls, and now we run it after.
    + util.concurrent: Fixed some cases in which we could catch
    InterruptedException but fail to restore the interrupt bit.</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Clean the spec file and simplify it a bit</changelog>
  <changelog author="fstrba@suse.com" date="1710244800">- Fix version mismatch in the ant build files.</changelog>
  <changelog author="fstrba@suse.com" date="1713355200">- Upgrade to guava 33.1.0
  * Changes of version 33.1.0:
    + Updated our Error Prone dependency to 2.26.1, which includes
    a JPMS-ready jar of annotations. If you use the Error Prone
    annotations in a modular build of your own code, you may need
    to add a requires line for them.
    + base: Added a Duration overload for
    Suppliers.memoizeWithExpiration.
    + base: Deprecated the remaining two overloads of
    Throwables.propagateIfPossible. They won't be deleted, but we
    recommend migrating off them.
    + cache: Fixed a bug that could cause false "recursive load"
    reports during refresh.
    + graph: Changed the return types of transitiveClosure() and
    reachableNodes() to Immutable* types. reachableNodes() already
    returned an immutable object (even though that was not
    reflected in the declared return type); transitiveClosure()
    used to return a mutable object. The old signatures remain
    available, so this change does not break binary compatibility.
    + graph: Changed the behavior of views returned by graph
    accessor methods that take a graph element as input: They now
    throw IllegalStateException when that element is removed from
    the graph.
    + hash: Optimized Checksum-based hash functions for Java 9+.
    + testing: Exposed FakeTicker Duration methods to Android users.
    + util.concurrent: Deprecated the constructors of
    UncheckedExecutionException and ExecutionError that don't
    accept a cause. We won't remove these constructors, but we
    recommend migrating off them, as users of those classes often
    assume that instances will contain a cause.
    + util.concurrent: Improved the correctness of racy accesses for
    J2ObjC users.
  * Changes of version 33.0.0:
    + This version of guava-android contains some package-private
    methods whose signature includes the Java 8 Collector API.
    This is a test to identify any problems before we expose those
    methods publicly to users. Please report any problems that you
    encounter.
    + Changed various classes to catch Exception instead of
    RuntimeException even when only RuntimeException is
    theoretically possible. This can help code that throws
    undeclared exceptions, as some bytecode rewriters (e.g.,
    Robolectric) and languages (e.g., Kotlin) do.
    + Added an Automatic-Module-Name to failureaccess, Guava's one
    strong runtime dependency.
    + reflect: In guava-android only, removed
    Invokable.getAnnotatedReturnType() and
    Parameter.getAnnotatedType(). These methods never worked in an
    Android VM, and to reflect that, they were born @Deprecated,
    @Beta, and @DoNotCall. They're now preventing us from rolling
    out some new Android compatibility testing. This is the only
    binary-incompatible change in this release, and it should have
    no effect in practice. Still, we bump the major version number
    to follow Semantic Versioning.
    + util.concurrent: Changed our implementations to avoid eagerly
    initializing loggers during class loading. This can help
    performance, especially under Android.
  * Changes of version 32.1.3:
    + Changed Gradle Metadata to include dependency versions
    directly. This may address "Could not find some-dependency"
    errors that some users have reported (which might be a result
    of users' excluding guava-parent).
    + collect: Changed Multisets.unmodifiableMultiset(set)
    .removeIf(predicate) to throw an exception always, even if
    nothing matches predicate.
    + graph: Fixed the behavior of Graph/ValueGraph views for a node
    when that node is removed from the graph.
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows services, a rare use case. (The fix actually covers
    only Java 9+ because Java 8 would require an additional
    approach. Let us know if you need support under Java 8.)
    + net: Made MediaType.parse allow and skip over whitespace
    around the / and = separator tokens in addition to the ;
    separator, for which it was already being allowed.
    + util.concurrent: Tweaked Futures.getChecked
    constructor-selection behavior: The method continues to prefer
    to call constructors with a String parameter, but now it
    breaks ties based on whether the constructor has a Throwable
    parameter. Beyond that, the choice of constructor remains
    undefined. (For this and other reasons, we discourage the use
    of getChecked.)
  * Changes of version 32.1.2:
    + Removed the section of our Gradle metadata that caused Gradle
    to report conflicts with listenablefuture.
    + Changed our Maven project to avoid affecting which version of
    Mockito our Gradle users see.
    + collect: Under J2CL, exposed ImmutableList and ImmutableSet
    methods copyOf and of for JavaScript usage.
    + net: Optimized InternetDomainName construction.
  * Changes of version 32.1.1:
    + Fixed our broken Gradle metadata from 32.1.0. Sorry again for
    the trouble. If you use Gradle, please still read the release
    notes from that version: You may still see errors from the new
    checking that the metadata enables, and the release notes
    discuss how to fix those errors.
  * Changes of version 32.1.0:
    + collect: Tweaked more nullness annotations.
    + hash: Enhanced crc32c() to use Java's hardware-accelerated
    implementation where available.
    + util.concurrent: Added Duration-based default methods to
    ListeningExecutorService.
    + Began updating Javadoc to focus less on APIs that have been
    superseded by additions to the JDK. We're also looking to add
    more documentation that directs users to JDK equivalents for
    our APIs. Further PRs welcome!
    + Fixed some problems with using Guava from a Java Agent.
    (But we don't test that configuration, and we don't know how
    well we'll be able to keep it working.)
    + Fixed BootstrapMethodError when using CacheBuilder from a
    custom system class loader. (As with the previous item,
    we're not sure how well we'll be able to keep this use case
    working.)
    + Suppressed a harmless unusable-by-js warning seen by users of
    guava-gwt.</changelog>
</package>
<package pkgid="0a1cf4ecbbc4488848e8d7c3d2228697bc460a52ad0be95deb0a49b463066070" name="guava" arch="src">
  <version epoch="0" ver="33.1.0" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1555070400">- Initial packaging of guava 25.0</changelog>
  <changelog author="fstrba@suse.com" date="1570708800">- Added patch:
  * guava-25.0-java8compat.patch
    + Avoid callingoverridden methods with covariant return types
    for java.nio.ByteBuffer and java.nio.CharBuffer, which were
    introduced in Java 9
    + This allows us to produce with Java &gt;= 9 binaries that are
    compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1574424000">- Build the package with ant in order to prevent build cycles
  * using a generated and customized ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1575460800">- Avoid version-less dependencies that can cause problems with
  some tools</changelog>
  <changelog author="fstrba@suse.com" date="1620648000">- Upgrade to guava 30.1.1
  * Fixes:
    + cache: Fixed compatibility between asMap().compute(...)
    and a load.
    + cache: Added @CheckReturnValue to some APIs.
    + collect: Added @DoNotCall to the mutator methods on immutable
    types
    + hash: Removed @Beta from HashCode.
    + io: Removed @Beta from CountingOutputStream.
  * fixes bsc#1179926, CVE-2020-8908: temp directory creation
    vulnerability in Guava versions prior to 30.0
- Removed patch:
  * guava-25.0-java8compat.patch
    + the compatibility is handled in the upstream code
- Added patch:
  * donotmock.patch
    + patch @DoNotMock annotation occurrences in order to put them
    in a format that our regex is able to identify and kill</changelog>
  <changelog author="fstrba@suse.com" date="1647000000">- Remove parent reference from ALL distributed pom files</changelog>
  <changelog author="fstrba@suse.com" date="1652875200">- Upgrade to guava 31.1
  * Fixes:
    + base: Deprecated the Throwables methods lazyStackTrace and
    lazyStackTraceIsLazy. They are no longer useful on any current
    platform.
    + collect: Added a new method
    ImmutableMap.Builder.buildKeepingLast(), which keeps the last
    value for any given key rather than throwing an exception when
    a key appears more than once.
    + collect: As a side-effect of the buildKeepingLast() change,
    the idiom
    ImmutableList.copyOf(Maps.transformValues(map, function))
    may produce different results if function has side-effects.
    + hash: Added Hashing.fingerprint2011().
    + io: Changed ByteStreams.nullOutputStream() to follow the
    contract of OutputStream.write by throwing an exception if
    the range of bytes is out of bounds.
    + net: Added @CheckReturnValue to the package (with a few
    exceptions).
    + net: Added HttpHeaders constant for
    Access-Control-Allow-Private-Network.
    + util.concurrent: Added accumulate/update methods for
    AtomicDouble and AtomicDoubleArray.
  * APIs promoted from @Beta:
    + base: Throwables methods getCausalChain and getCauseAs
    + collect: Streams methods mapWithIndex and findLast
    + collect: the remaining methods in Comparators: min, max,
    lexicographical, emptiesFirst, emptiesLast, isInOrder,
    isInStrictOrder
    + escape: various APIs
    + io: various APIs in Files
    + net: various APIs
    + reflect: various APIs
    + testlib: various APIs
    + util.concurrent: AsyncCallable, ListenableScheduledFuture,
    and ClosingFuture
    + util.concurrent: ExecutionSequencer,
    MoreExecutors.newSequentialExecutor, and Monitor
    + util.concurrent: Futures methods: submit, submitAsync,
    scheduleAsync, nonCancellationPropagating, inCompletionOrder
    + util.concurrent: Uninterruptibles:
    awaitTerminationUninterruptibly and the Duration overloads in
    the class
    + util.concurrent: the FluentFuture type, its factory methods,
    and addCallback
  * Remove the hack of removing annotations, since we have now
    all the required dependencies packaged
- Removed patch:
  * donotmock.patch
    + hack not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1686830400">- Upgrade to guava 32.0.1
  * Security fixes:
    + Reimplemented Files.createTempDir and FileBackedOutputStream
    to further address CVE-2020-8908 (#4011, bsc#1179926) and
    CVE-2023-2976 (#2575, bsc#1212401)
  * Fixes:
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows, which broke as part of the security fix in release
    32.0.0
    + Removed @Beta from almost all APIs. Most of the remaining
    @Beta APIs are in graph and hash.
    + Enhanced the Guava jar to include Proguard configurations that
    are picked up automatically by the Android Gradle Plugin. This
    should help with warnings that were promoted to errors in
    Android Gradle Plugin 8.x.
    + Enhanced the Guava jar to include information about method
    parameters in its class files. If you use static analyzers
    that look at method-parameter names, you may see new warnings
    or errors if they are now able to detect mismatches. But
    mostly, you may see better tooltips and autocompletion in
    DEs.
    + Improved nullness annotations on a few classes.
    + Modified classes with "serial proxies" to declare
    exception-throwing readObject methods, in accordance with best
    practice.
    + collect: Fixed Maps.newHashMapWithExpectedSize to stop
    allocating maps that were larger than they needed to be.
    + collect: Made various APIs work J2CL:
    Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset,
    CollectorTester. Previously, the APIs were present but failed
    at runtime.
    + collect: Optimized memory usage for Interner and MapMaker.
    + graph: Changed directed graphs to reject attempts to add
    undirected edges.
    + io: Added BaseEncoding.ignoreCase() to support
    case-insensitive decoding.
    + net: Added HttpHeaders constants:
    ~ No-Vary-Search
    ~ Sec-CH-DPR
    ~ Sec-CH-UA-Wow64
    ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height
    ~ Supports-Loading-Mode
    + net: Added the MediaType constant for JWT.
    + primitives: Added rotate() for arrays of all primitive types.
    + util.concurrent: Changed AbstractFuture to run
    interruptTask() just before afterDone(). Until this change, it
    ran slightly earlier than that: We used to run it before
    unblocking any pending get() calls, and now we run it after.
    + util.concurrent: Fixed some cases in which we could catch
    InterruptedException but fail to restore the interrupt bit.</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Clean the spec file and simplify it a bit</changelog>
  <changelog author="fstrba@suse.com" date="1710244800">- Fix version mismatch in the ant build files.</changelog>
  <changelog author="fstrba@suse.com" date="1713355200">- Upgrade to guava 33.1.0
  * Changes of version 33.1.0:
    + Updated our Error Prone dependency to 2.26.1, which includes
    a JPMS-ready jar of annotations. If you use the Error Prone
    annotations in a modular build of your own code, you may need
    to add a requires line for them.
    + base: Added a Duration overload for
    Suppliers.memoizeWithExpiration.
    + base: Deprecated the remaining two overloads of
    Throwables.propagateIfPossible. They won't be deleted, but we
    recommend migrating off them.
    + cache: Fixed a bug that could cause false "recursive load"
    reports during refresh.
    + graph: Changed the return types of transitiveClosure() and
    reachableNodes() to Immutable* types. reachableNodes() already
    returned an immutable object (even though that was not
    reflected in the declared return type); transitiveClosure()
    used to return a mutable object. The old signatures remain
    available, so this change does not break binary compatibility.
    + graph: Changed the behavior of views returned by graph
    accessor methods that take a graph element as input: They now
    throw IllegalStateException when that element is removed from
    the graph.
    + hash: Optimized Checksum-based hash functions for Java 9+.
    + testing: Exposed FakeTicker Duration methods to Android users.
    + util.concurrent: Deprecated the constructors of
    UncheckedExecutionException and ExecutionError that don't
    accept a cause. We won't remove these constructors, but we
    recommend migrating off them, as users of those classes often
    assume that instances will contain a cause.
    + util.concurrent: Improved the correctness of racy accesses for
    J2ObjC users.
  * Changes of version 33.0.0:
    + This version of guava-android contains some package-private
    methods whose signature includes the Java 8 Collector API.
    This is a test to identify any problems before we expose those
    methods publicly to users. Please report any problems that you
    encounter.
    + Changed various classes to catch Exception instead of
    RuntimeException even when only RuntimeException is
    theoretically possible. This can help code that throws
    undeclared exceptions, as some bytecode rewriters (e.g.,
    Robolectric) and languages (e.g., Kotlin) do.
    + Added an Automatic-Module-Name to failureaccess, Guava's one
    strong runtime dependency.
    + reflect: In guava-android only, removed
    Invokable.getAnnotatedReturnType() and
    Parameter.getAnnotatedType(). These methods never worked in an
    Android VM, and to reflect that, they were born @Deprecated,
    @Beta, and @DoNotCall. They're now preventing us from rolling
    out some new Android compatibility testing. This is the only
    binary-incompatible change in this release, and it should have
    no effect in practice. Still, we bump the major version number
    to follow Semantic Versioning.
    + util.concurrent: Changed our implementations to avoid eagerly
    initializing loggers during class loading. This can help
    performance, especially under Android.
  * Changes of version 32.1.3:
    + Changed Gradle Metadata to include dependency versions
    directly. This may address "Could not find some-dependency"
    errors that some users have reported (which might be a result
    of users' excluding guava-parent).
    + collect: Changed Multisets.unmodifiableMultiset(set)
    .removeIf(predicate) to throw an exception always, even if
    nothing matches predicate.
    + graph: Fixed the behavior of Graph/ValueGraph views for a node
    when that node is removed from the graph.
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows services, a rare use case. (The fix actually covers
    only Java 9+ because Java 8 would require an additional
    approach. Let us know if you need support under Java 8.)
    + net: Made MediaType.parse allow and skip over whitespace
    around the / and = separator tokens in addition to the ;
    separator, for which it was already being allowed.
    + util.concurrent: Tweaked Futures.getChecked
    constructor-selection behavior: The method continues to prefer
    to call constructors with a String parameter, but now it
    breaks ties based on whether the constructor has a Throwable
    parameter. Beyond that, the choice of constructor remains
    undefined. (For this and other reasons, we discourage the use
    of getChecked.)
  * Changes of version 32.1.2:
    + Removed the section of our Gradle metadata that caused Gradle
    to report conflicts with listenablefuture.
    + Changed our Maven project to avoid affecting which version of
    Mockito our Gradle users see.
    + collect: Under J2CL, exposed ImmutableList and ImmutableSet
    methods copyOf and of for JavaScript usage.
    + net: Optimized InternetDomainName construction.
  * Changes of version 32.1.1:
    + Fixed our broken Gradle metadata from 32.1.0. Sorry again for
    the trouble. If you use Gradle, please still read the release
    notes from that version: You may still see errors from the new
    checking that the metadata enables, and the release notes
    discuss how to fix those errors.
  * Changes of version 32.1.0:
    + collect: Tweaked more nullness annotations.
    + hash: Enhanced crc32c() to use Java's hardware-accelerated
    implementation where available.
    + util.concurrent: Added Duration-based default methods to
    ListeningExecutorService.
    + Began updating Javadoc to focus less on APIs that have been
    superseded by additions to the JDK. We're also looking to add
    more documentation that directs users to JDK equivalents for
    our APIs. Further PRs welcome!
    + Fixed some problems with using Guava from a Java Agent.
    (But we don't test that configuration, and we don't know how
    well we'll be able to keep it working.)
    + Fixed BootstrapMethodError when using CacheBuilder from a
    custom system class loader. (As with the previous item,
    we're not sure how well we'll be able to keep this use case
    working.)
    + Suppressed a harmless unusable-by-js warning seen by users of
    guava-gwt.</changelog>
</package>
<package pkgid="34142cde6debeb7378e6a814ab45438dae0f600b76f9079599e1ef41f561441a" name="guava-javadoc" arch="noarch">
  <version epoch="0" ver="33.1.0" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1555070400">- Initial packaging of guava 25.0</changelog>
  <changelog author="fstrba@suse.com" date="1570708800">- Added patch:
  * guava-25.0-java8compat.patch
    + Avoid callingoverridden methods with covariant return types
    for java.nio.ByteBuffer and java.nio.CharBuffer, which were
    introduced in Java 9
    + This allows us to produce with Java &gt;= 9 binaries that are
    compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1574424000">- Build the package with ant in order to prevent build cycles
  * using a generated and customized ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1575460800">- Avoid version-less dependencies that can cause problems with
  some tools</changelog>
  <changelog author="fstrba@suse.com" date="1620648000">- Upgrade to guava 30.1.1
  * Fixes:
    + cache: Fixed compatibility between asMap().compute(...)
    and a load.
    + cache: Added @CheckReturnValue to some APIs.
    + collect: Added @DoNotCall to the mutator methods on immutable
    types
    + hash: Removed @Beta from HashCode.
    + io: Removed @Beta from CountingOutputStream.
  * fixes bsc#1179926, CVE-2020-8908: temp directory creation
    vulnerability in Guava versions prior to 30.0
- Removed patch:
  * guava-25.0-java8compat.patch
    + the compatibility is handled in the upstream code
- Added patch:
  * donotmock.patch
    + patch @DoNotMock annotation occurrences in order to put them
    in a format that our regex is able to identify and kill</changelog>
  <changelog author="fstrba@suse.com" date="1647000000">- Remove parent reference from ALL distributed pom files</changelog>
  <changelog author="fstrba@suse.com" date="1652875200">- Upgrade to guava 31.1
  * Fixes:
    + base: Deprecated the Throwables methods lazyStackTrace and
    lazyStackTraceIsLazy. They are no longer useful on any current
    platform.
    + collect: Added a new method
    ImmutableMap.Builder.buildKeepingLast(), which keeps the last
    value for any given key rather than throwing an exception when
    a key appears more than once.
    + collect: As a side-effect of the buildKeepingLast() change,
    the idiom
    ImmutableList.copyOf(Maps.transformValues(map, function))
    may produce different results if function has side-effects.
    + hash: Added Hashing.fingerprint2011().
    + io: Changed ByteStreams.nullOutputStream() to follow the
    contract of OutputStream.write by throwing an exception if
    the range of bytes is out of bounds.
    + net: Added @CheckReturnValue to the package (with a few
    exceptions).
    + net: Added HttpHeaders constant for
    Access-Control-Allow-Private-Network.
    + util.concurrent: Added accumulate/update methods for
    AtomicDouble and AtomicDoubleArray.
  * APIs promoted from @Beta:
    + base: Throwables methods getCausalChain and getCauseAs
    + collect: Streams methods mapWithIndex and findLast
    + collect: the remaining methods in Comparators: min, max,
    lexicographical, emptiesFirst, emptiesLast, isInOrder,
    isInStrictOrder
    + escape: various APIs
    + io: various APIs in Files
    + net: various APIs
    + reflect: various APIs
    + testlib: various APIs
    + util.concurrent: AsyncCallable, ListenableScheduledFuture,
    and ClosingFuture
    + util.concurrent: ExecutionSequencer,
    MoreExecutors.newSequentialExecutor, and Monitor
    + util.concurrent: Futures methods: submit, submitAsync,
    scheduleAsync, nonCancellationPropagating, inCompletionOrder
    + util.concurrent: Uninterruptibles:
    awaitTerminationUninterruptibly and the Duration overloads in
    the class
    + util.concurrent: the FluentFuture type, its factory methods,
    and addCallback
  * Remove the hack of removing annotations, since we have now
    all the required dependencies packaged
- Removed patch:
  * donotmock.patch
    + hack not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1686830400">- Upgrade to guava 32.0.1
  * Security fixes:
    + Reimplemented Files.createTempDir and FileBackedOutputStream
    to further address CVE-2020-8908 (#4011, bsc#1179926) and
    CVE-2023-2976 (#2575, bsc#1212401)
  * Fixes:
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows, which broke as part of the security fix in release
    32.0.0
    + Removed @Beta from almost all APIs. Most of the remaining
    @Beta APIs are in graph and hash.
    + Enhanced the Guava jar to include Proguard configurations that
    are picked up automatically by the Android Gradle Plugin. This
    should help with warnings that were promoted to errors in
    Android Gradle Plugin 8.x.
    + Enhanced the Guava jar to include information about method
    parameters in its class files. If you use static analyzers
    that look at method-parameter names, you may see new warnings
    or errors if they are now able to detect mismatches. But
    mostly, you may see better tooltips and autocompletion in
    DEs.
    + Improved nullness annotations on a few classes.
    + Modified classes with "serial proxies" to declare
    exception-throwing readObject methods, in accordance with best
    practice.
    + collect: Fixed Maps.newHashMapWithExpectedSize to stop
    allocating maps that were larger than they needed to be.
    + collect: Made various APIs work J2CL:
    Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset,
    CollectorTester. Previously, the APIs were present but failed
    at runtime.
    + collect: Optimized memory usage for Interner and MapMaker.
    + graph: Changed directed graphs to reject attempts to add
    undirected edges.
    + io: Added BaseEncoding.ignoreCase() to support
    case-insensitive decoding.
    + net: Added HttpHeaders constants:
    ~ No-Vary-Search
    ~ Sec-CH-DPR
    ~ Sec-CH-UA-Wow64
    ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height
    ~ Supports-Loading-Mode
    + net: Added the MediaType constant for JWT.
    + primitives: Added rotate() for arrays of all primitive types.
    + util.concurrent: Changed AbstractFuture to run
    interruptTask() just before afterDone(). Until this change, it
    ran slightly earlier than that: We used to run it before
    unblocking any pending get() calls, and now we run it after.
    + util.concurrent: Fixed some cases in which we could catch
    InterruptedException but fail to restore the interrupt bit.</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Clean the spec file and simplify it a bit</changelog>
  <changelog author="fstrba@suse.com" date="1710244800">- Fix version mismatch in the ant build files.</changelog>
  <changelog author="fstrba@suse.com" date="1713355200">- Upgrade to guava 33.1.0
  * Changes of version 33.1.0:
    + Updated our Error Prone dependency to 2.26.1, which includes
    a JPMS-ready jar of annotations. If you use the Error Prone
    annotations in a modular build of your own code, you may need
    to add a requires line for them.
    + base: Added a Duration overload for
    Suppliers.memoizeWithExpiration.
    + base: Deprecated the remaining two overloads of
    Throwables.propagateIfPossible. They won't be deleted, but we
    recommend migrating off them.
    + cache: Fixed a bug that could cause false "recursive load"
    reports during refresh.
    + graph: Changed the return types of transitiveClosure() and
    reachableNodes() to Immutable* types. reachableNodes() already
    returned an immutable object (even though that was not
    reflected in the declared return type); transitiveClosure()
    used to return a mutable object. The old signatures remain
    available, so this change does not break binary compatibility.
    + graph: Changed the behavior of views returned by graph
    accessor methods that take a graph element as input: They now
    throw IllegalStateException when that element is removed from
    the graph.
    + hash: Optimized Checksum-based hash functions for Java 9+.
    + testing: Exposed FakeTicker Duration methods to Android users.
    + util.concurrent: Deprecated the constructors of
    UncheckedExecutionException and ExecutionError that don't
    accept a cause. We won't remove these constructors, but we
    recommend migrating off them, as users of those classes often
    assume that instances will contain a cause.
    + util.concurrent: Improved the correctness of racy accesses for
    J2ObjC users.
  * Changes of version 33.0.0:
    + This version of guava-android contains some package-private
    methods whose signature includes the Java 8 Collector API.
    This is a test to identify any problems before we expose those
    methods publicly to users. Please report any problems that you
    encounter.
    + Changed various classes to catch Exception instead of
    RuntimeException even when only RuntimeException is
    theoretically possible. This can help code that throws
    undeclared exceptions, as some bytecode rewriters (e.g.,
    Robolectric) and languages (e.g., Kotlin) do.
    + Added an Automatic-Module-Name to failureaccess, Guava's one
    strong runtime dependency.
    + reflect: In guava-android only, removed
    Invokable.getAnnotatedReturnType() and
    Parameter.getAnnotatedType(). These methods never worked in an
    Android VM, and to reflect that, they were born @Deprecated,
    @Beta, and @DoNotCall. They're now preventing us from rolling
    out some new Android compatibility testing. This is the only
    binary-incompatible change in this release, and it should have
    no effect in practice. Still, we bump the major version number
    to follow Semantic Versioning.
    + util.concurrent: Changed our implementations to avoid eagerly
    initializing loggers during class loading. This can help
    performance, especially under Android.
  * Changes of version 32.1.3:
    + Changed Gradle Metadata to include dependency versions
    directly. This may address "Could not find some-dependency"
    errors that some users have reported (which might be a result
    of users' excluding guava-parent).
    + collect: Changed Multisets.unmodifiableMultiset(set)
    .removeIf(predicate) to throw an exception always, even if
    nothing matches predicate.
    + graph: Fixed the behavior of Graph/ValueGraph views for a node
    when that node is removed from the graph.
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows services, a rare use case. (The fix actually covers
    only Java 9+ because Java 8 would require an additional
    approach. Let us know if you need support under Java 8.)
    + net: Made MediaType.parse allow and skip over whitespace
    around the / and = separator tokens in addition to the ;
    separator, for which it was already being allowed.
    + util.concurrent: Tweaked Futures.getChecked
    constructor-selection behavior: The method continues to prefer
    to call constructors with a String parameter, but now it
    breaks ties based on whether the constructor has a Throwable
    parameter. Beyond that, the choice of constructor remains
    undefined. (For this and other reasons, we discourage the use
    of getChecked.)
  * Changes of version 32.1.2:
    + Removed the section of our Gradle metadata that caused Gradle
    to report conflicts with listenablefuture.
    + Changed our Maven project to avoid affecting which version of
    Mockito our Gradle users see.
    + collect: Under J2CL, exposed ImmutableList and ImmutableSet
    methods copyOf and of for JavaScript usage.
    + net: Optimized InternetDomainName construction.
  * Changes of version 32.1.1:
    + Fixed our broken Gradle metadata from 32.1.0. Sorry again for
    the trouble. If you use Gradle, please still read the release
    notes from that version: You may still see errors from the new
    checking that the metadata enables, and the release notes
    discuss how to fix those errors.
  * Changes of version 32.1.0:
    + collect: Tweaked more nullness annotations.
    + hash: Enhanced crc32c() to use Java's hardware-accelerated
    implementation where available.
    + util.concurrent: Added Duration-based default methods to
    ListeningExecutorService.
    + Began updating Javadoc to focus less on APIs that have been
    superseded by additions to the JDK. We're also looking to add
    more documentation that directs users to JDK equivalents for
    our APIs. Further PRs welcome!
    + Fixed some problems with using Guava from a Java Agent.
    (But we don't test that configuration, and we don't know how
    well we'll be able to keep it working.)
    + Fixed BootstrapMethodError when using CacheBuilder from a
    custom system class loader. (As with the previous item,
    we're not sure how well we'll be able to keep this use case
    working.)
    + Suppressed a harmless unusable-by-js warning seen by users of
    guava-gwt.</changelog>
</package>
<package pkgid="70ca616c0dafd9259d65e4690c378c87e899ab7a0a40fb8f013205cd9df6224a" name="guava-testlib" arch="noarch">
  <version epoch="0" ver="33.1.0" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1555070400">- Initial packaging of guava 25.0</changelog>
  <changelog author="fstrba@suse.com" date="1570708800">- Added patch:
  * guava-25.0-java8compat.patch
    + Avoid callingoverridden methods with covariant return types
    for java.nio.ByteBuffer and java.nio.CharBuffer, which were
    introduced in Java 9
    + This allows us to produce with Java &gt;= 9 binaries that are
    compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1574424000">- Build the package with ant in order to prevent build cycles
  * using a generated and customized ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1575460800">- Avoid version-less dependencies that can cause problems with
  some tools</changelog>
  <changelog author="fstrba@suse.com" date="1620648000">- Upgrade to guava 30.1.1
  * Fixes:
    + cache: Fixed compatibility between asMap().compute(...)
    and a load.
    + cache: Added @CheckReturnValue to some APIs.
    + collect: Added @DoNotCall to the mutator methods on immutable
    types
    + hash: Removed @Beta from HashCode.
    + io: Removed @Beta from CountingOutputStream.
  * fixes bsc#1179926, CVE-2020-8908: temp directory creation
    vulnerability in Guava versions prior to 30.0
- Removed patch:
  * guava-25.0-java8compat.patch
    + the compatibility is handled in the upstream code
- Added patch:
  * donotmock.patch
    + patch @DoNotMock annotation occurrences in order to put them
    in a format that our regex is able to identify and kill</changelog>
  <changelog author="fstrba@suse.com" date="1647000000">- Remove parent reference from ALL distributed pom files</changelog>
  <changelog author="fstrba@suse.com" date="1652875200">- Upgrade to guava 31.1
  * Fixes:
    + base: Deprecated the Throwables methods lazyStackTrace and
    lazyStackTraceIsLazy. They are no longer useful on any current
    platform.
    + collect: Added a new method
    ImmutableMap.Builder.buildKeepingLast(), which keeps the last
    value for any given key rather than throwing an exception when
    a key appears more than once.
    + collect: As a side-effect of the buildKeepingLast() change,
    the idiom
    ImmutableList.copyOf(Maps.transformValues(map, function))
    may produce different results if function has side-effects.
    + hash: Added Hashing.fingerprint2011().
    + io: Changed ByteStreams.nullOutputStream() to follow the
    contract of OutputStream.write by throwing an exception if
    the range of bytes is out of bounds.
    + net: Added @CheckReturnValue to the package (with a few
    exceptions).
    + net: Added HttpHeaders constant for
    Access-Control-Allow-Private-Network.
    + util.concurrent: Added accumulate/update methods for
    AtomicDouble and AtomicDoubleArray.
  * APIs promoted from @Beta:
    + base: Throwables methods getCausalChain and getCauseAs
    + collect: Streams methods mapWithIndex and findLast
    + collect: the remaining methods in Comparators: min, max,
    lexicographical, emptiesFirst, emptiesLast, isInOrder,
    isInStrictOrder
    + escape: various APIs
    + io: various APIs in Files
    + net: various APIs
    + reflect: various APIs
    + testlib: various APIs
    + util.concurrent: AsyncCallable, ListenableScheduledFuture,
    and ClosingFuture
    + util.concurrent: ExecutionSequencer,
    MoreExecutors.newSequentialExecutor, and Monitor
    + util.concurrent: Futures methods: submit, submitAsync,
    scheduleAsync, nonCancellationPropagating, inCompletionOrder
    + util.concurrent: Uninterruptibles:
    awaitTerminationUninterruptibly and the Duration overloads in
    the class
    + util.concurrent: the FluentFuture type, its factory methods,
    and addCallback
  * Remove the hack of removing annotations, since we have now
    all the required dependencies packaged
- Removed patch:
  * donotmock.patch
    + hack not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1686830400">- Upgrade to guava 32.0.1
  * Security fixes:
    + Reimplemented Files.createTempDir and FileBackedOutputStream
    to further address CVE-2020-8908 (#4011, bsc#1179926) and
    CVE-2023-2976 (#2575, bsc#1212401)
  * Fixes:
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows, which broke as part of the security fix in release
    32.0.0
    + Removed @Beta from almost all APIs. Most of the remaining
    @Beta APIs are in graph and hash.
    + Enhanced the Guava jar to include Proguard configurations that
    are picked up automatically by the Android Gradle Plugin. This
    should help with warnings that were promoted to errors in
    Android Gradle Plugin 8.x.
    + Enhanced the Guava jar to include information about method
    parameters in its class files. If you use static analyzers
    that look at method-parameter names, you may see new warnings
    or errors if they are now able to detect mismatches. But
    mostly, you may see better tooltips and autocompletion in
    DEs.
    + Improved nullness annotations on a few classes.
    + Modified classes with "serial proxies" to declare
    exception-throwing readObject methods, in accordance with best
    practice.
    + collect: Fixed Maps.newHashMapWithExpectedSize to stop
    allocating maps that were larger than they needed to be.
    + collect: Made various APIs work J2CL:
    Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset,
    CollectorTester. Previously, the APIs were present but failed
    at runtime.
    + collect: Optimized memory usage for Interner and MapMaker.
    + graph: Changed directed graphs to reject attempts to add
    undirected edges.
    + io: Added BaseEncoding.ignoreCase() to support
    case-insensitive decoding.
    + net: Added HttpHeaders constants:
    ~ No-Vary-Search
    ~ Sec-CH-DPR
    ~ Sec-CH-UA-Wow64
    ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height
    ~ Supports-Loading-Mode
    + net: Added the MediaType constant for JWT.
    + primitives: Added rotate() for arrays of all primitive types.
    + util.concurrent: Changed AbstractFuture to run
    interruptTask() just before afterDone(). Until this change, it
    ran slightly earlier than that: We used to run it before
    unblocking any pending get() calls, and now we run it after.
    + util.concurrent: Fixed some cases in which we could catch
    InterruptedException but fail to restore the interrupt bit.</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Clean the spec file and simplify it a bit</changelog>
  <changelog author="fstrba@suse.com" date="1710244800">- Fix version mismatch in the ant build files.</changelog>
  <changelog author="fstrba@suse.com" date="1713355200">- Upgrade to guava 33.1.0
  * Changes of version 33.1.0:
    + Updated our Error Prone dependency to 2.26.1, which includes
    a JPMS-ready jar of annotations. If you use the Error Prone
    annotations in a modular build of your own code, you may need
    to add a requires line for them.
    + base: Added a Duration overload for
    Suppliers.memoizeWithExpiration.
    + base: Deprecated the remaining two overloads of
    Throwables.propagateIfPossible. They won't be deleted, but we
    recommend migrating off them.
    + cache: Fixed a bug that could cause false "recursive load"
    reports during refresh.
    + graph: Changed the return types of transitiveClosure() and
    reachableNodes() to Immutable* types. reachableNodes() already
    returned an immutable object (even though that was not
    reflected in the declared return type); transitiveClosure()
    used to return a mutable object. The old signatures remain
    available, so this change does not break binary compatibility.
    + graph: Changed the behavior of views returned by graph
    accessor methods that take a graph element as input: They now
    throw IllegalStateException when that element is removed from
    the graph.
    + hash: Optimized Checksum-based hash functions for Java 9+.
    + testing: Exposed FakeTicker Duration methods to Android users.
    + util.concurrent: Deprecated the constructors of
    UncheckedExecutionException and ExecutionError that don't
    accept a cause. We won't remove these constructors, but we
    recommend migrating off them, as users of those classes often
    assume that instances will contain a cause.
    + util.concurrent: Improved the correctness of racy accesses for
    J2ObjC users.
  * Changes of version 33.0.0:
    + This version of guava-android contains some package-private
    methods whose signature includes the Java 8 Collector API.
    This is a test to identify any problems before we expose those
    methods publicly to users. Please report any problems that you
    encounter.
    + Changed various classes to catch Exception instead of
    RuntimeException even when only RuntimeException is
    theoretically possible. This can help code that throws
    undeclared exceptions, as some bytecode rewriters (e.g.,
    Robolectric) and languages (e.g., Kotlin) do.
    + Added an Automatic-Module-Name to failureaccess, Guava's one
    strong runtime dependency.
    + reflect: In guava-android only, removed
    Invokable.getAnnotatedReturnType() and
    Parameter.getAnnotatedType(). These methods never worked in an
    Android VM, and to reflect that, they were born @Deprecated,
    @Beta, and @DoNotCall. They're now preventing us from rolling
    out some new Android compatibility testing. This is the only
    binary-incompatible change in this release, and it should have
    no effect in practice. Still, we bump the major version number
    to follow Semantic Versioning.
    + util.concurrent: Changed our implementations to avoid eagerly
    initializing loggers during class loading. This can help
    performance, especially under Android.
  * Changes of version 32.1.3:
    + Changed Gradle Metadata to include dependency versions
    directly. This may address "Could not find some-dependency"
    errors that some users have reported (which might be a result
    of users' excluding guava-parent).
    + collect: Changed Multisets.unmodifiableMultiset(set)
    .removeIf(predicate) to throw an exception always, even if
    nothing matches predicate.
    + graph: Fixed the behavior of Graph/ValueGraph views for a node
    when that node is removed from the graph.
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows services, a rare use case. (The fix actually covers
    only Java 9+ because Java 8 would require an additional
    approach. Let us know if you need support under Java 8.)
    + net: Made MediaType.parse allow and skip over whitespace
    around the / and = separator tokens in addition to the ;
    separator, for which it was already being allowed.
    + util.concurrent: Tweaked Futures.getChecked
    constructor-selection behavior: The method continues to prefer
    to call constructors with a String parameter, but now it
    breaks ties based on whether the constructor has a Throwable
    parameter. Beyond that, the choice of constructor remains
    undefined. (For this and other reasons, we discourage the use
    of getChecked.)
  * Changes of version 32.1.2:
    + Removed the section of our Gradle metadata that caused Gradle
    to report conflicts with listenablefuture.
    + Changed our Maven project to avoid affecting which version of
    Mockito our Gradle users see.
    + collect: Under J2CL, exposed ImmutableList and ImmutableSet
    methods copyOf and of for JavaScript usage.
    + net: Optimized InternetDomainName construction.
  * Changes of version 32.1.1:
    + Fixed our broken Gradle metadata from 32.1.0. Sorry again for
    the trouble. If you use Gradle, please still read the release
    notes from that version: You may still see errors from the new
    checking that the metadata enables, and the release notes
    discuss how to fix those errors.
  * Changes of version 32.1.0:
    + collect: Tweaked more nullness annotations.
    + hash: Enhanced crc32c() to use Java's hardware-accelerated
    implementation where available.
    + util.concurrent: Added Duration-based default methods to
    ListeningExecutorService.
    + Began updating Javadoc to focus less on APIs that have been
    superseded by additions to the JDK. We're also looking to add
    more documentation that directs users to JDK equivalents for
    our APIs. Further PRs welcome!
    + Fixed some problems with using Guava from a Java Agent.
    (But we don't test that configuration, and we don't know how
    well we'll be able to keep it working.)
    + Fixed BootstrapMethodError when using CacheBuilder from a
    custom system class loader. (As with the previous item,
    we're not sure how well we'll be able to keep this use case
    working.)
    + Suppressed a harmless unusable-by-js warning seen by users of
    guava-gwt.</changelog>
</package>
<package pkgid="d21d587b34a07cace44d8b542b7fdbae1244919870d8e2c025d5773f21bc9d0a" name="hamcrest" arch="noarch">
  <version epoch="0" ver="2.2" rel="150200.12.13.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix homepage
- Update to build with new javapacakges-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Apply patch from fedora:
  * hamcrest-1.3-fork-javac.patch</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Modified patch:
  * hamcrest-1.3-fork-javac.patch
    + Specify java target level 1.6 in order to allow building
    with jdk9
- Specify java source level 1.6 in order to allow building with
  jdk9
- Added patch:
  * hamcrest-1.3-javadoc9.patch
    + fix javadoc errors that are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * hamcrest-1.3-javadoc10.patch
    + Fix build with jdk10's javadoc that ends in error when a
    link cannot be downloaded</changelog>
  <changelog author="fstrba@suse.com" date="1546603200">- Use sources from github, which are accessible
- Do not build the hamcrest-text empty jar
- Split a core package off the main package
- Added patch:
  * hamcrest-1.3-qdox-2.0.patch
    + Fix build against QDox 2.0
- Removed patch:
  * hamcrest-1.3-no-integration.patch
    + Not needed any more since integration is buildable
- Modified patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Make jmock and easymock integration opt-in (bsc#1121956)</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Remove references to the hamcrest-parent pom and do not
  distribute it
  * useless since we don't build with maven
  * creates problems with gradle connector</changelog>
  <changelog author="pmonreal@suse.com" date="1605614400">- Add obsoletes in core to fix updates. [bsc#1174544]</changelog>
  <changelog author="pmonreal@suse.com" date="1605787200">- Fix RPM Lint complaint: summary-ended-with-dot</changelog>
  <changelog author="pmonreal@suse.com" date="1609848000">- Fix typo in hamcrest-core description [bsc#1179994]</changelog>
  <changelog author="pmonreal@suse.com" date="1609848001">- Make hamcrest build reproducibly [bsc#1120493]
- Add hamcrest-reproducible-builds.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * hamcrest-1.3-build.patch
    + Build with source/target levels 8
- Added patch:
  * hamcrest-matchers.patch
    + Fix build with jdk17</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Upgrade to upstream version 2.2
  * After a long hiatus without releases, this version simplifies
    the packaging of Hamcrest into a single jar. Other big changes
    include Java 9 module compatibility, along with numerous other
    improvements and bug fixes.
  * Breaking Changes
    + Although the class API has not changed since Hamcrest 1.3, the
    way that the project is packaged has changed. Refer to the
    Hamcrest Distributables documentation for more information,
    and in particular the section on Upgrading from Hamcrest 1.x
    + The org.hamcrest.Factory annotation has been removed
    (it should not be used in client code)
  * Improvements
    + AllOf/AnyOf: Pass the matchers to constructor using varargs
    + Matchers.anyOf: Fix generic bounds compatibility for JDK 11
    + AssertionError message is unhelpful when match fails for byte
    type
    + Use platform specific line breaks
    + Build now checks for consistent use of spaces
  * Changes
    + Fix compatibility issue for development with Android D8
    + Fix typo in license name
    + 1.3 compatible constructors for string matchers
    + Fix for split packages with Java 9 modules
    + Documentation updates
    + Add implementation for CharSequence length matcher
    + Fix for TypeSafeDiagnosingMatcher can't detect generic types
    for subclass
    + Renamed IsCollectionContaining to IsIterableContaining
    + Make Hamcrest an OSGI bundle
    + Add StringRegularExpression matcher
    + Fix StringContainsInOrder to detect if a repeated pattern is
    missing
    + Add ArrayAsIterableMatcher
    + Fix description for IsEqualIgnoringCase
    + Fix JavaDoc examples
    + Upgraded to Java 7
    + Build with Gradle
    + Deprecate IsCollectionContaining and IsArrayContainingXXX
    + Removed deprecated methods from previous release
    + Improve mismatch description of hasItem/hasItems
    + General improvements to mismatch descriptions
    + Several JavaDoc improvements and corrections
    + Deprecated several matcher factory methods of the for "isXyz"
    + Fix address doclint errors reported in JDK 1.8
    + Fix Iterable contains in order is null-safe
    + Added equalToObject() (i.e. unchecked) method
    + Fix arrayContaining(null, null) cause NullPointerException
  * Fix string matching on regular expressions
  * Fix isCloseTo() shows wrong delta in mismatch description
  * Fix add untyped version of equalTo, named equalToObject
  * Implement IsEmptyMap, IsMapWithSize
  * Fix IsArray.describeMismatchSafely() should use
    Matcher.describeMismatch
  * Add Matcher implementation for files
  * Fix NPE in IsIterableContainingInOrder
- Removed patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-qdox-2.0.patch
  * hamcrest-1.3-random-build-crash.patch
  * hamcrest-reproducible-builds.patch
    + not needed with the new version
- Modified patch:
  * hamcrest-matchers.patch -&gt; 0001-Fix-build-with-OpenJDK-11.patch
    + adapt to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="e06a2d0ae6a47d8290f7a99544049715bbfe545f97fb729c9dea2455a54683ec" name="hamcrest" arch="src">
  <version epoch="0" ver="2.2" rel="150200.12.13.2"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1382356800">- Update to 1.3
  bugfix and feature update, see CHANGES.txt for details
- Removed patches
  * hamcrest-1.1-build.patch
    + renamed to hamcrest-1.3-build.patch
  * hamcrest-1.1-no-jarjar.patch
    + renamed to hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.1-no-integration.patch
    + renamed to hamcrest-1.3-no-integration.patch
- Added patches
  * hamcrest-1.3-javadoc.patch
- Updated poms and added OSGI manifests from Fedora</changelog>
  <changelog author="mvyskocil@suse.com" date="1383048000">- drop junit from dependencies, it's not needed and cause a build cycle</changelog>
  <changelog author="tchvatal@suse.com" date="1402920000">- Add patch to fix random build errors by enforcing single thread.
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Use junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix homepage
- Update to build with new javapacakges-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Apply patch from fedora:
  * hamcrest-1.3-fork-javac.patch</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Modified patch:
  * hamcrest-1.3-fork-javac.patch
    + Specify java target level 1.6 in order to allow building
    with jdk9
- Specify java source level 1.6 in order to allow building with
  jdk9
- Added patch:
  * hamcrest-1.3-javadoc9.patch
    + fix javadoc errors that are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * hamcrest-1.3-javadoc10.patch
    + Fix build with jdk10's javadoc that ends in error when a
    link cannot be downloaded</changelog>
  <changelog author="fstrba@suse.com" date="1546603200">- Use sources from github, which are accessible
- Do not build the hamcrest-text empty jar
- Split a core package off the main package
- Added patch:
  * hamcrest-1.3-qdox-2.0.patch
    + Fix build against QDox 2.0
- Removed patch:
  * hamcrest-1.3-no-integration.patch
    + Not needed any more since integration is buildable
- Modified patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Make jmock and easymock integration opt-in (bsc#1121956)</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Remove references to the hamcrest-parent pom and do not
  distribute it
  * useless since we don't build with maven
  * creates problems with gradle connector</changelog>
  <changelog author="pmonreal@suse.com" date="1605614400">- Add obsoletes in core to fix updates. [bsc#1174544]</changelog>
  <changelog author="pmonreal@suse.com" date="1605787200">- Fix RPM Lint complaint: summary-ended-with-dot</changelog>
  <changelog author="pmonreal@suse.com" date="1609848000">- Fix typo in hamcrest-core description [bsc#1179994]</changelog>
  <changelog author="pmonreal@suse.com" date="1609848001">- Make hamcrest build reproducibly [bsc#1120493]
- Add hamcrest-reproducible-builds.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * hamcrest-1.3-build.patch
    + Build with source/target levels 8
- Added patch:
  * hamcrest-matchers.patch
    + Fix build with jdk17</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Upgrade to upstream version 2.2
  * After a long hiatus without releases, this version simplifies
    the packaging of Hamcrest into a single jar. Other big changes
    include Java 9 module compatibility, along with numerous other
    improvements and bug fixes.
  * Breaking Changes
    + Although the class API has not changed since Hamcrest 1.3, the
    way that the project is packaged has changed. Refer to the
    Hamcrest Distributables documentation for more information,
    and in particular the section on Upgrading from Hamcrest 1.x
    + The org.hamcrest.Factory annotation has been removed
    (it should not be used in client code)
  * Improvements
    + AllOf/AnyOf: Pass the matchers to constructor using varargs
    + Matchers.anyOf: Fix generic bounds compatibility for JDK 11
    + AssertionError message is unhelpful when match fails for byte
    type
    + Use platform specific line breaks
    + Build now checks for consistent use of spaces
  * Changes
    + Fix compatibility issue for development with Android D8
    + Fix typo in license name
    + 1.3 compatible constructors for string matchers
    + Fix for split packages with Java 9 modules
    + Documentation updates
    + Add implementation for CharSequence length matcher
    + Fix for TypeSafeDiagnosingMatcher can't detect generic types
    for subclass
    + Renamed IsCollectionContaining to IsIterableContaining
    + Make Hamcrest an OSGI bundle
    + Add StringRegularExpression matcher
    + Fix StringContainsInOrder to detect if a repeated pattern is
    missing
    + Add ArrayAsIterableMatcher
    + Fix description for IsEqualIgnoringCase
    + Fix JavaDoc examples
    + Upgraded to Java 7
    + Build with Gradle
    + Deprecate IsCollectionContaining and IsArrayContainingXXX
    + Removed deprecated methods from previous release
    + Improve mismatch description of hasItem/hasItems
    + General improvements to mismatch descriptions
    + Several JavaDoc improvements and corrections
    + Deprecated several matcher factory methods of the for "isXyz"
    + Fix address doclint errors reported in JDK 1.8
    + Fix Iterable contains in order is null-safe
    + Added equalToObject() (i.e. unchecked) method
    + Fix arrayContaining(null, null) cause NullPointerException
  * Fix string matching on regular expressions
  * Fix isCloseTo() shows wrong delta in mismatch description
  * Fix add untyped version of equalTo, named equalToObject
  * Implement IsEmptyMap, IsMapWithSize
  * Fix IsArray.describeMismatchSafely() should use
    Matcher.describeMismatch
  * Add Matcher implementation for files
  * Fix NPE in IsIterableContainingInOrder
- Removed patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-qdox-2.0.patch
  * hamcrest-1.3-random-build-crash.patch
  * hamcrest-reproducible-builds.patch
    + not needed with the new version
- Modified patch:
  * hamcrest-matchers.patch -&gt; 0001-Fix-build-with-OpenJDK-11.patch
    + adapt to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="e6ebdeb08b26a67d98e4c20d41263290100678ad9aa0963f8e2b08cc24a67e3c" name="hamcrest" arch="noarch">
  <version epoch="0" ver="2.2" rel="150200.12.17.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix homepage
- Update to build with new javapacakges-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Apply patch from fedora:
  * hamcrest-1.3-fork-javac.patch</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Modified patch:
  * hamcrest-1.3-fork-javac.patch
    + Specify java target level 1.6 in order to allow building
    with jdk9
- Specify java source level 1.6 in order to allow building with
  jdk9
- Added patch:
  * hamcrest-1.3-javadoc9.patch
    + fix javadoc errors that are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * hamcrest-1.3-javadoc10.patch
    + Fix build with jdk10's javadoc that ends in error when a
    link cannot be downloaded</changelog>
  <changelog author="fstrba@suse.com" date="1546603200">- Use sources from github, which are accessible
- Do not build the hamcrest-text empty jar
- Split a core package off the main package
- Added patch:
  * hamcrest-1.3-qdox-2.0.patch
    + Fix build against QDox 2.0
- Removed patch:
  * hamcrest-1.3-no-integration.patch
    + Not needed any more since integration is buildable
- Modified patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Make jmock and easymock integration opt-in (bsc#1121956)</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Remove references to the hamcrest-parent pom and do not
  distribute it
  * useless since we don't build with maven
  * creates problems with gradle connector</changelog>
  <changelog author="pmonreal@suse.com" date="1605614400">- Add obsoletes in core to fix updates. [bsc#1174544]</changelog>
  <changelog author="pmonreal@suse.com" date="1605787200">- Fix RPM Lint complaint: summary-ended-with-dot</changelog>
  <changelog author="pmonreal@suse.com" date="1609848000">- Fix typo in hamcrest-core description [bsc#1179994]</changelog>
  <changelog author="pmonreal@suse.com" date="1609848001">- Make hamcrest build reproducibly [bsc#1120493]
- Add hamcrest-reproducible-builds.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * hamcrest-1.3-build.patch
    + Build with source/target levels 8
- Added patch:
  * hamcrest-matchers.patch
    + Fix build with jdk17</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Upgrade to upstream version 2.2
  * After a long hiatus without releases, this version simplifies
    the packaging of Hamcrest into a single jar. Other big changes
    include Java 9 module compatibility, along with numerous other
    improvements and bug fixes.
  * Breaking Changes
    + Although the class API has not changed since Hamcrest 1.3, the
    way that the project is packaged has changed. Refer to the
    Hamcrest Distributables documentation for more information,
    and in particular the section on Upgrading from Hamcrest 1.x
    + The org.hamcrest.Factory annotation has been removed
    (it should not be used in client code)
  * Improvements
    + AllOf/AnyOf: Pass the matchers to constructor using varargs
    + Matchers.anyOf: Fix generic bounds compatibility for JDK 11
    + AssertionError message is unhelpful when match fails for byte
    type
    + Use platform specific line breaks
    + Build now checks for consistent use of spaces
  * Changes
    + Fix compatibility issue for development with Android D8
    + Fix typo in license name
    + 1.3 compatible constructors for string matchers
    + Fix for split packages with Java 9 modules
    + Documentation updates
    + Add implementation for CharSequence length matcher
    + Fix for TypeSafeDiagnosingMatcher can't detect generic types
    for subclass
    + Renamed IsCollectionContaining to IsIterableContaining
    + Make Hamcrest an OSGI bundle
    + Add StringRegularExpression matcher
    + Fix StringContainsInOrder to detect if a repeated pattern is
    missing
    + Add ArrayAsIterableMatcher
    + Fix description for IsEqualIgnoringCase
    + Fix JavaDoc examples
    + Upgraded to Java 7
    + Build with Gradle
    + Deprecate IsCollectionContaining and IsArrayContainingXXX
    + Removed deprecated methods from previous release
    + Improve mismatch description of hasItem/hasItems
    + General improvements to mismatch descriptions
    + Several JavaDoc improvements and corrections
    + Deprecated several matcher factory methods of the for "isXyz"
    + Fix address doclint errors reported in JDK 1.8
    + Fix Iterable contains in order is null-safe
    + Added equalToObject() (i.e. unchecked) method
    + Fix arrayContaining(null, null) cause NullPointerException
  * Fix string matching on regular expressions
  * Fix isCloseTo() shows wrong delta in mismatch description
  * Fix add untyped version of equalTo, named equalToObject
  * Implement IsEmptyMap, IsMapWithSize
  * Fix IsArray.describeMismatchSafely() should use
    Matcher.describeMismatch
  * Add Matcher implementation for files
  * Fix NPE in IsIterableContainingInOrder
- Removed patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-qdox-2.0.patch
  * hamcrest-1.3-random-build-crash.patch
  * hamcrest-reproducible-builds.patch
    + not needed with the new version
- Modified patch:
  * hamcrest-matchers.patch -&gt; 0001-Fix-build-with-OpenJDK-11.patch
    + adapt to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="7caf42e87eff003a32793a1e8b37df8003472a9a2e606c3297c96e16e5542d18" name="hamcrest" arch="src">
  <version epoch="0" ver="2.2" rel="150200.12.17.2"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1382356800">- Update to 1.3
  bugfix and feature update, see CHANGES.txt for details
- Removed patches
  * hamcrest-1.1-build.patch
    + renamed to hamcrest-1.3-build.patch
  * hamcrest-1.1-no-jarjar.patch
    + renamed to hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.1-no-integration.patch
    + renamed to hamcrest-1.3-no-integration.patch
- Added patches
  * hamcrest-1.3-javadoc.patch
- Updated poms and added OSGI manifests from Fedora</changelog>
  <changelog author="mvyskocil@suse.com" date="1383048000">- drop junit from dependencies, it's not needed and cause a build cycle</changelog>
  <changelog author="tchvatal@suse.com" date="1402920000">- Add patch to fix random build errors by enforcing single thread.
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Use junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix homepage
- Update to build with new javapacakges-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Apply patch from fedora:
  * hamcrest-1.3-fork-javac.patch</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Modified patch:
  * hamcrest-1.3-fork-javac.patch
    + Specify java target level 1.6 in order to allow building
    with jdk9
- Specify java source level 1.6 in order to allow building with
  jdk9
- Added patch:
  * hamcrest-1.3-javadoc9.patch
    + fix javadoc errors that are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * hamcrest-1.3-javadoc10.patch
    + Fix build with jdk10's javadoc that ends in error when a
    link cannot be downloaded</changelog>
  <changelog author="fstrba@suse.com" date="1546603200">- Use sources from github, which are accessible
- Do not build the hamcrest-text empty jar
- Split a core package off the main package
- Added patch:
  * hamcrest-1.3-qdox-2.0.patch
    + Fix build against QDox 2.0
- Removed patch:
  * hamcrest-1.3-no-integration.patch
    + Not needed any more since integration is buildable
- Modified patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Make jmock and easymock integration opt-in (bsc#1121956)</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Remove references to the hamcrest-parent pom and do not
  distribute it
  * useless since we don't build with maven
  * creates problems with gradle connector</changelog>
  <changelog author="pmonreal@suse.com" date="1605614400">- Add obsoletes in core to fix updates. [bsc#1174544]</changelog>
  <changelog author="pmonreal@suse.com" date="1605787200">- Fix RPM Lint complaint: summary-ended-with-dot</changelog>
  <changelog author="pmonreal@suse.com" date="1609848000">- Fix typo in hamcrest-core description [bsc#1179994]</changelog>
  <changelog author="pmonreal@suse.com" date="1609848001">- Make hamcrest build reproducibly [bsc#1120493]
- Add hamcrest-reproducible-builds.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * hamcrest-1.3-build.patch
    + Build with source/target levels 8
- Added patch:
  * hamcrest-matchers.patch
    + Fix build with jdk17</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Upgrade to upstream version 2.2
  * After a long hiatus without releases, this version simplifies
    the packaging of Hamcrest into a single jar. Other big changes
    include Java 9 module compatibility, along with numerous other
    improvements and bug fixes.
  * Breaking Changes
    + Although the class API has not changed since Hamcrest 1.3, the
    way that the project is packaged has changed. Refer to the
    Hamcrest Distributables documentation for more information,
    and in particular the section on Upgrading from Hamcrest 1.x
    + The org.hamcrest.Factory annotation has been removed
    (it should not be used in client code)
  * Improvements
    + AllOf/AnyOf: Pass the matchers to constructor using varargs
    + Matchers.anyOf: Fix generic bounds compatibility for JDK 11
    + AssertionError message is unhelpful when match fails for byte
    type
    + Use platform specific line breaks
    + Build now checks for consistent use of spaces
  * Changes
    + Fix compatibility issue for development with Android D8
    + Fix typo in license name
    + 1.3 compatible constructors for string matchers
    + Fix for split packages with Java 9 modules
    + Documentation updates
    + Add implementation for CharSequence length matcher
    + Fix for TypeSafeDiagnosingMatcher can't detect generic types
    for subclass
    + Renamed IsCollectionContaining to IsIterableContaining
    + Make Hamcrest an OSGI bundle
    + Add StringRegularExpression matcher
    + Fix StringContainsInOrder to detect if a repeated pattern is
    missing
    + Add ArrayAsIterableMatcher
    + Fix description for IsEqualIgnoringCase
    + Fix JavaDoc examples
    + Upgraded to Java 7
    + Build with Gradle
    + Deprecate IsCollectionContaining and IsArrayContainingXXX
    + Removed deprecated methods from previous release
    + Improve mismatch description of hasItem/hasItems
    + General improvements to mismatch descriptions
    + Several JavaDoc improvements and corrections
    + Deprecated several matcher factory methods of the for "isXyz"
    + Fix address doclint errors reported in JDK 1.8
    + Fix Iterable contains in order is null-safe
    + Added equalToObject() (i.e. unchecked) method
    + Fix arrayContaining(null, null) cause NullPointerException
  * Fix string matching on regular expressions
  * Fix isCloseTo() shows wrong delta in mismatch description
  * Fix add untyped version of equalTo, named equalToObject
  * Implement IsEmptyMap, IsMapWithSize
  * Fix IsArray.describeMismatchSafely() should use
    Matcher.describeMismatch
  * Add Matcher implementation for files
  * Fix NPE in IsIterableContainingInOrder
- Removed patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-qdox-2.0.patch
  * hamcrest-1.3-random-build-crash.patch
  * hamcrest-reproducible-builds.patch
    + not needed with the new version
- Modified patch:
  * hamcrest-matchers.patch -&gt; 0001-Fix-build-with-OpenJDK-11.patch
    + adapt to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="79f6d46a2198bb7a464f7b971f41611a799917826e9845b83fca8ae1deedc7a2" name="hamcrest-javadoc" arch="noarch">
  <version epoch="0" ver="2.2" rel="150200.12.13.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix homepage
- Update to build with new javapacakges-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Apply patch from fedora:
  * hamcrest-1.3-fork-javac.patch</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Modified patch:
  * hamcrest-1.3-fork-javac.patch
    + Specify java target level 1.6 in order to allow building
    with jdk9
- Specify java source level 1.6 in order to allow building with
  jdk9
- Added patch:
  * hamcrest-1.3-javadoc9.patch
    + fix javadoc errors that are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * hamcrest-1.3-javadoc10.patch
    + Fix build with jdk10's javadoc that ends in error when a
    link cannot be downloaded</changelog>
  <changelog author="fstrba@suse.com" date="1546603200">- Use sources from github, which are accessible
- Do not build the hamcrest-text empty jar
- Split a core package off the main package
- Added patch:
  * hamcrest-1.3-qdox-2.0.patch
    + Fix build against QDox 2.0
- Removed patch:
  * hamcrest-1.3-no-integration.patch
    + Not needed any more since integration is buildable
- Modified patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Make jmock and easymock integration opt-in (bsc#1121956)</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Remove references to the hamcrest-parent pom and do not
  distribute it
  * useless since we don't build with maven
  * creates problems with gradle connector</changelog>
  <changelog author="pmonreal@suse.com" date="1605614400">- Add obsoletes in core to fix updates. [bsc#1174544]</changelog>
  <changelog author="pmonreal@suse.com" date="1605787200">- Fix RPM Lint complaint: summary-ended-with-dot</changelog>
  <changelog author="pmonreal@suse.com" date="1609848000">- Fix typo in hamcrest-core description [bsc#1179994]</changelog>
  <changelog author="pmonreal@suse.com" date="1609848001">- Make hamcrest build reproducibly [bsc#1120493]
- Add hamcrest-reproducible-builds.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * hamcrest-1.3-build.patch
    + Build with source/target levels 8
- Added patch:
  * hamcrest-matchers.patch
    + Fix build with jdk17</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Upgrade to upstream version 2.2
  * After a long hiatus without releases, this version simplifies
    the packaging of Hamcrest into a single jar. Other big changes
    include Java 9 module compatibility, along with numerous other
    improvements and bug fixes.
  * Breaking Changes
    + Although the class API has not changed since Hamcrest 1.3, the
    way that the project is packaged has changed. Refer to the
    Hamcrest Distributables documentation for more information,
    and in particular the section on Upgrading from Hamcrest 1.x
    + The org.hamcrest.Factory annotation has been removed
    (it should not be used in client code)
  * Improvements
    + AllOf/AnyOf: Pass the matchers to constructor using varargs
    + Matchers.anyOf: Fix generic bounds compatibility for JDK 11
    + AssertionError message is unhelpful when match fails for byte
    type
    + Use platform specific line breaks
    + Build now checks for consistent use of spaces
  * Changes
    + Fix compatibility issue for development with Android D8
    + Fix typo in license name
    + 1.3 compatible constructors for string matchers
    + Fix for split packages with Java 9 modules
    + Documentation updates
    + Add implementation for CharSequence length matcher
    + Fix for TypeSafeDiagnosingMatcher can't detect generic types
    for subclass
    + Renamed IsCollectionContaining to IsIterableContaining
    + Make Hamcrest an OSGI bundle
    + Add StringRegularExpression matcher
    + Fix StringContainsInOrder to detect if a repeated pattern is
    missing
    + Add ArrayAsIterableMatcher
    + Fix description for IsEqualIgnoringCase
    + Fix JavaDoc examples
    + Upgraded to Java 7
    + Build with Gradle
    + Deprecate IsCollectionContaining and IsArrayContainingXXX
    + Removed deprecated methods from previous release
    + Improve mismatch description of hasItem/hasItems
    + General improvements to mismatch descriptions
    + Several JavaDoc improvements and corrections
    + Deprecated several matcher factory methods of the for "isXyz"
    + Fix address doclint errors reported in JDK 1.8
    + Fix Iterable contains in order is null-safe
    + Added equalToObject() (i.e. unchecked) method
    + Fix arrayContaining(null, null) cause NullPointerException
  * Fix string matching on regular expressions
  * Fix isCloseTo() shows wrong delta in mismatch description
  * Fix add untyped version of equalTo, named equalToObject
  * Implement IsEmptyMap, IsMapWithSize
  * Fix IsArray.describeMismatchSafely() should use
    Matcher.describeMismatch
  * Add Matcher implementation for files
  * Fix NPE in IsIterableContainingInOrder
- Removed patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-qdox-2.0.patch
  * hamcrest-1.3-random-build-crash.patch
  * hamcrest-reproducible-builds.patch
    + not needed with the new version
- Modified patch:
  * hamcrest-matchers.patch -&gt; 0001-Fix-build-with-OpenJDK-11.patch
    + adapt to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="ab65cb6caf187705a9dc04c62417ca7c6542c438da49cdebd36fa8a7225e0036" name="hamcrest-javadoc" arch="noarch">
  <version epoch="0" ver="2.2" rel="150200.12.17.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix homepage
- Update to build with new javapacakges-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Apply patch from fedora:
  * hamcrest-1.3-fork-javac.patch</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Modified patch:
  * hamcrest-1.3-fork-javac.patch
    + Specify java target level 1.6 in order to allow building
    with jdk9
- Specify java source level 1.6 in order to allow building with
  jdk9
- Added patch:
  * hamcrest-1.3-javadoc9.patch
    + fix javadoc errors that are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * hamcrest-1.3-javadoc10.patch
    + Fix build with jdk10's javadoc that ends in error when a
    link cannot be downloaded</changelog>
  <changelog author="fstrba@suse.com" date="1546603200">- Use sources from github, which are accessible
- Do not build the hamcrest-text empty jar
- Split a core package off the main package
- Added patch:
  * hamcrest-1.3-qdox-2.0.patch
    + Fix build against QDox 2.0
- Removed patch:
  * hamcrest-1.3-no-integration.patch
    + Not needed any more since integration is buildable
- Modified patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Make jmock and easymock integration opt-in (bsc#1121956)</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Remove references to the hamcrest-parent pom and do not
  distribute it
  * useless since we don't build with maven
  * creates problems with gradle connector</changelog>
  <changelog author="pmonreal@suse.com" date="1605614400">- Add obsoletes in core to fix updates. [bsc#1174544]</changelog>
  <changelog author="pmonreal@suse.com" date="1605787200">- Fix RPM Lint complaint: summary-ended-with-dot</changelog>
  <changelog author="pmonreal@suse.com" date="1609848000">- Fix typo in hamcrest-core description [bsc#1179994]</changelog>
  <changelog author="pmonreal@suse.com" date="1609848001">- Make hamcrest build reproducibly [bsc#1120493]
- Add hamcrest-reproducible-builds.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * hamcrest-1.3-build.patch
    + Build with source/target levels 8
- Added patch:
  * hamcrest-matchers.patch
    + Fix build with jdk17</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Upgrade to upstream version 2.2
  * After a long hiatus without releases, this version simplifies
    the packaging of Hamcrest into a single jar. Other big changes
    include Java 9 module compatibility, along with numerous other
    improvements and bug fixes.
  * Breaking Changes
    + Although the class API has not changed since Hamcrest 1.3, the
    way that the project is packaged has changed. Refer to the
    Hamcrest Distributables documentation for more information,
    and in particular the section on Upgrading from Hamcrest 1.x
    + The org.hamcrest.Factory annotation has been removed
    (it should not be used in client code)
  * Improvements
    + AllOf/AnyOf: Pass the matchers to constructor using varargs
    + Matchers.anyOf: Fix generic bounds compatibility for JDK 11
    + AssertionError message is unhelpful when match fails for byte
    type
    + Use platform specific line breaks
    + Build now checks for consistent use of spaces
  * Changes
    + Fix compatibility issue for development with Android D8
    + Fix typo in license name
    + 1.3 compatible constructors for string matchers
    + Fix for split packages with Java 9 modules
    + Documentation updates
    + Add implementation for CharSequence length matcher
    + Fix for TypeSafeDiagnosingMatcher can't detect generic types
    for subclass
    + Renamed IsCollectionContaining to IsIterableContaining
    + Make Hamcrest an OSGI bundle
    + Add StringRegularExpression matcher
    + Fix StringContainsInOrder to detect if a repeated pattern is
    missing
    + Add ArrayAsIterableMatcher
    + Fix description for IsEqualIgnoringCase
    + Fix JavaDoc examples
    + Upgraded to Java 7
    + Build with Gradle
    + Deprecate IsCollectionContaining and IsArrayContainingXXX
    + Removed deprecated methods from previous release
    + Improve mismatch description of hasItem/hasItems
    + General improvements to mismatch descriptions
    + Several JavaDoc improvements and corrections
    + Deprecated several matcher factory methods of the for "isXyz"
    + Fix address doclint errors reported in JDK 1.8
    + Fix Iterable contains in order is null-safe
    + Added equalToObject() (i.e. unchecked) method
    + Fix arrayContaining(null, null) cause NullPointerException
  * Fix string matching on regular expressions
  * Fix isCloseTo() shows wrong delta in mismatch description
  * Fix add untyped version of equalTo, named equalToObject
  * Implement IsEmptyMap, IsMapWithSize
  * Fix IsArray.describeMismatchSafely() should use
    Matcher.describeMismatch
  * Add Matcher implementation for files
  * Fix NPE in IsIterableContainingInOrder
- Removed patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-qdox-2.0.patch
  * hamcrest-1.3-random-build-crash.patch
  * hamcrest-reproducible-builds.patch
    + not needed with the new version
- Modified patch:
  * hamcrest-matchers.patch -&gt; 0001-Fix-build-with-OpenJDK-11.patch
    + adapt to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="ed45ead6bd6f15488519ed8f40df116b3afb35e93bbea3c17cb80e6a35eb3624" name="iperf" arch="aarch64">
  <version epoch="0" ver="3.17.1" rel="150000.3.9.1"/>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530878400">- update to 3.6
  * A new --extra-data option can be used to fill in a user-defined
    string field that appears in JSON output.
  * A new --repeating-payload option makes iperf3 use a payload pattern
    similar to that used by iperf2, which could help in recreating
    results that might be affected by payload entropy (for example,
    compression).
  * -B now works properly with SCTP tests.
  * A compile fix for Solaris 10 was added.
  * Some minor bug fixes for JSON output.  In particular, warnings for
    debug and/or verbose modes with --json output and a fix for
    JSON output on CentOS 6</changelog>
  <changelog author="msvec@suse.com" date="1573732800">- update to 3.7
  * Support for simultaneous bidirectional tests with the --bidir flag
  * Use POSIX standard clock_gettime(3) interface for timekeeping where
    available
  * Passwords for authentication can be provided via environment
    variable
  * Specifying --repeating-payload and --reverse now works
  * Failed authentication doesn't count for --one-off
  * Several memory leaks related to authenticated use were fixed
  * The delay for tearing down the control connection for the default
    timed tests has been increased, to more gracefully handle
    high-delay paths
  * Various improvements to the libiperf APIs
  * Fixed build behavior when OpenSSL is absent
  * Portability fixes
- spec file cleanup</changelog>
  <changelog author="msvec@suse.com" date="1594468800">- update to 3.8.1
  * Minor bugfixes and enhancements
- don't apply the profiling patch any more
  (removed iperf-disable-profiling.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1600084800">- update to 3.9:
  * A --timestamps flag has been added, which prepends a timestamp to
    each output line.  An optional argument to this flag, which is a
    format specification to strftime(3), allows for custom timestamp
    formats (#909, #1028).
  * A --server-bitrate-limit flag has been added as a server-side
    command-line argument.  It allows a server to enforce a maximum
    throughput rate; client connections that specify a higher bitrate
    or exceed this bitrate during a test will be terminated.  The
    bitrate is expressed in bits per second, with an optional trailing
    slash and integer count that specifies an averaging interval over
    which to enforce the limit (#999).
  * A bug that caused increased CPU usage with the --bidir option has
    been fixed (#1011).
  * Fixed various minor memory leaks (#1023).</changelog>
  <changelog author="msvec@suse.com" date="1623067200">- update to 3.10:
  * Fix a bug where some --reverse tests didn't terminate (#982 /
    [#1054]).
  * Responsiveness of control connections is slightly improved (#1045
    / #1046 / #1063).
  * The allowable clock skew when doing authentication between client
    and server is now configurable with the new --time-skew-threshold
    (#1065 / #1070).
  * Bitrate throttling using the -b option now works when a burst size
    is specified (#1090).
  * A bug with calculating CPU utilization has been fixed (#1076 /
    [#1077]).
  * A --bind-dev option to support binding sockets to a given network
    interface has been added to make iperf3 work better with
    multi-homed machines and/or VRFs (#817 / #1089 / #1097).
  * --pidfile now works with --client mode (#1110).
  * The server is now less likely to get stuck due to network errors
    (#1101, #1125), controlled by the new --rcv-timeout option.
  * Fixed a few bugs in termination conditions for byte or
    block-limited tests (#1113, #1114, #1115).
  * Added tcp_info.snd_wnd to JSON output (#1148).
  * Some bugs with garbled JSON output have been fixed (#1086, #1118,
    [#1143] / #1146).
  * Support for setting the IPv4 don't-fragment (DF) bit has been
    added with the new --dont-fragment option (#1119).
  * A failure with not being able to read the congestion control
    algorithm under WSL1 has been fixed (#1061 / #1126).
  * Error handling and error messages now make more sense in cases
    where sockets were not successfully opened (#1129 / #1132 /
    [#1136], #1135 / #1138, #1128 / #1139).
  * Some buffer overflow hazards were fixed (#1134).
  * It is now possible to use the API to set/get the congestion
    control algorithm (#1036 / #1112).</changelog>
  <changelog author="msvec@suse.com" date="1623067201">- update to 3.10.1:
  * Fixed a problem with autoconf scripts that made builds fail in
    some environments (#1154 / #1155).
  * GNU autoconf 2.71 or newer is now required to regenerate iperf3's
    configure scripts.</changelog>
  <changelog author="msvec@suse.com" date="1646308800">- update to 3.11:
  * Update links to Discussions in documentation
  * Fix DSCP so that TOS = DSCP * 4 (#1162)
  * Fix --bind-dev for TCP streams (#1153)
  * Fix interface specification so doesn't overlap with IPv6 link-local addresses for -c and -B (#1157, #1180)
  * Add get/set test_unit_format function declaration to iperf_api.h
  * Auto adjustment of test-end condition for file transfers (-F), if no end condition is set, it will automatically adjust it to file size in bytes
  * Exit if idle time expires waiting for a connection in one-off mode (#1187, #1197)
  * Support zerocopy by reverse mode (#1204)
  * Update help and manpage text for #1157, support bind device
  * Consistently print target_bandwidth in JSON start section (#1177)
  * Test bitrate added to JSON output (#1168)
  * Remove fsync call after every write to receiving --file (#1176, #1159)
  * Update documentation for -w (#1175)
  * Fix for #952, different JSON object names for bidir reverse channel</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 3.12:
  * cJSON has been updated to version 1.7.15 (#1383).
  * The --bind &lt;host&gt;%&lt;dev&gt; option syntax now works properly (#1360 /
  * A server-side file descriptor leak with the --logfile option has
    been fixed (#1369 / #1360 / #1369 / #1389 / #1393).
  * A bug that caused some large values from TCP_INFO to be misprinted
    as negative numbers has been fixed (#1372).
  * Using the -k or -n flags with --reverse no longer leak into future
    tests (#1363 / #1364).
  * There are now various debug level options available with the
  - -debug option. These can be used to adjust the amount of
    debugging output (#1327).
  * A new --snd-timeout option has been added to set a termination
    timeout for idle TCP connections (#1215 / #1282).
  * iperf3 is slightly more robust to out-of-order packets during UDP
    connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 /
  * iperf3 will now use different ports for each direction when the
  - -cport and --bdir options are set (#1249 / #1259).
  * The iperf3 server will now exit if it can't open its log file
  * Various help message and output fixes have been made (#1299 /
  * Various compiler warnings have been fixed (#1211 / #1316).
  * Operation of bootstrap.sh has been fixed and simplified (#1335 /
  * Flow label support / compatibility under Linux has been improved
  * Various minor memory leaks have been fixed (#1332 / #1333).
  * A getter/setter has been added for the bind_port parameter
    (--cport option). (#1303, #1305)
  * Various internal documentation improvements (#1265 / #1285 / #1304).</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 3.13:
  * Added missing bind_dev getter and setter.
  * a fix for A resource leak bug in function iperf_create_pidfile (#1443)
  * doc: Fix copy-and-paste error leading to wrong error message
  * Fix crash on rcv-timeout with JSON logfile</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- update to 3.14 (bsc#1213430, CVE-2023-38403):
  * fixes a memory allocation hazard that allowed a remote user to
    crash an iperf3 process
  * see
    https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc
  * obsoletes CVE-2023-38403.patch in older dists</changelog>
  <changelog author="dmueller@suse.com" date="1695470400">- update to 3.15 (bsc#1215662, ESNET-SECADV-2023-0002):
  * Several bugs that could allow the iperf3 server to hang waiting
    for input on the control connection has been fixed
    (ESnet Software Security Advisory ESNET-SECADV-2023-0002)
  * A bug that caused garbled output with UDP tests on 32-bit hosts
    has been fixed (PR #1554, PR #1556). This bug was introduced in
    iperf-3.14.
  * A bug in counting UDP messages has been fixed</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 3.16:
  * Multiple test streams started with -P/--parallel will now be
    serviced by different threads. This allows iperf3 to take
    advantage of multiple CPU cores on modern processors, and will
    generally result in significant throughput increases
  * OpenSSL 3 is now detected at build time. If OpenSSL 3 is found,
    various older, deprecated, APIs will not be used. iperf3 will
    continue to work with OpenSSL 1.1.1. OpenSSL is used as a part
    of the iperf3 authentication functionality
  * The authorized users file used by the authentication
    functionality is now checked for accessibility much earlier
    during the program startup, as opposed to being checked near
    the start of a test (Issue #1583, PR #1585).
  * BREAKING CHANGE: iperf3 now requires pthreads and C atomic
    variables to compile and run.</changelog>
  <changelog author="dmueller@suse.com" date="1715774400">- update to 3.17.1 (bsc#1224262, CVE-2024-26306):
  * BREAKING CHANGE: iperf3's authentication features, when used
    with OpenSSL prior to 3.2.0, contain a vulnerability to a
    side-channel timing attack. To address this flaw, a change
    has been made to the padding applied to encrypted strings.
    This change is not backwards compatible with older versions of
    iperf3 (before 3.17). To restore
    the older (vulnerable) behavior, and hence
    backwards-compatibility, use the --use-pkcs1-padding flag. The
    iperf3 team thanks Hubert Kario from RedHat for reporting this
    issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
  * iperf3 no longer changes its current working directory in --daemon
    mode. This results in more predictable behavior with relative
    paths, in particular finding key and credential files for
    authentication. (PR#1672)
  * A new --json-stream option has been added to enable a streaming
    output format, consisting of a series of JSON objects (for the
    start of the test, each measurement interval, and the end of the
    test) separated by newlines (#444, #923, #1098).
  * UDP tests now work correctly between different endian hosts
  * The --fq-rate parameter now works for --reverse tests
  * The statistics reporting interval is now available in the --json
    start test object (#1663).
  * A negative time test duration is now properly flagged as an error
    (IS#1662 / PR#1666).</changelog>
</package>
<package pkgid="766e433894a496139ba76d2308baed344da6ec129b48e3f4e5c694f5dfe35f39" name="iperf" arch="ppc64le">
  <version epoch="0" ver="3.17.1" rel="150000.3.9.1"/>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530878400">- update to 3.6
  * A new --extra-data option can be used to fill in a user-defined
    string field that appears in JSON output.
  * A new --repeating-payload option makes iperf3 use a payload pattern
    similar to that used by iperf2, which could help in recreating
    results that might be affected by payload entropy (for example,
    compression).
  * -B now works properly with SCTP tests.
  * A compile fix for Solaris 10 was added.
  * Some minor bug fixes for JSON output.  In particular, warnings for
    debug and/or verbose modes with --json output and a fix for
    JSON output on CentOS 6</changelog>
  <changelog author="msvec@suse.com" date="1573732800">- update to 3.7
  * Support for simultaneous bidirectional tests with the --bidir flag
  * Use POSIX standard clock_gettime(3) interface for timekeeping where
    available
  * Passwords for authentication can be provided via environment
    variable
  * Specifying --repeating-payload and --reverse now works
  * Failed authentication doesn't count for --one-off
  * Several memory leaks related to authenticated use were fixed
  * The delay for tearing down the control connection for the default
    timed tests has been increased, to more gracefully handle
    high-delay paths
  * Various improvements to the libiperf APIs
  * Fixed build behavior when OpenSSL is absent
  * Portability fixes
- spec file cleanup</changelog>
  <changelog author="msvec@suse.com" date="1594468800">- update to 3.8.1
  * Minor bugfixes and enhancements
- don't apply the profiling patch any more
  (removed iperf-disable-profiling.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1600084800">- update to 3.9:
  * A --timestamps flag has been added, which prepends a timestamp to
    each output line.  An optional argument to this flag, which is a
    format specification to strftime(3), allows for custom timestamp
    formats (#909, #1028).
  * A --server-bitrate-limit flag has been added as a server-side
    command-line argument.  It allows a server to enforce a maximum
    throughput rate; client connections that specify a higher bitrate
    or exceed this bitrate during a test will be terminated.  The
    bitrate is expressed in bits per second, with an optional trailing
    slash and integer count that specifies an averaging interval over
    which to enforce the limit (#999).
  * A bug that caused increased CPU usage with the --bidir option has
    been fixed (#1011).
  * Fixed various minor memory leaks (#1023).</changelog>
  <changelog author="msvec@suse.com" date="1623067200">- update to 3.10:
  * Fix a bug where some --reverse tests didn't terminate (#982 /
    [#1054]).
  * Responsiveness of control connections is slightly improved (#1045
    / #1046 / #1063).
  * The allowable clock skew when doing authentication between client
    and server is now configurable with the new --time-skew-threshold
    (#1065 / #1070).
  * Bitrate throttling using the -b option now works when a burst size
    is specified (#1090).
  * A bug with calculating CPU utilization has been fixed (#1076 /
    [#1077]).
  * A --bind-dev option to support binding sockets to a given network
    interface has been added to make iperf3 work better with
    multi-homed machines and/or VRFs (#817 / #1089 / #1097).
  * --pidfile now works with --client mode (#1110).
  * The server is now less likely to get stuck due to network errors
    (#1101, #1125), controlled by the new --rcv-timeout option.
  * Fixed a few bugs in termination conditions for byte or
    block-limited tests (#1113, #1114, #1115).
  * Added tcp_info.snd_wnd to JSON output (#1148).
  * Some bugs with garbled JSON output have been fixed (#1086, #1118,
    [#1143] / #1146).
  * Support for setting the IPv4 don't-fragment (DF) bit has been
    added with the new --dont-fragment option (#1119).
  * A failure with not being able to read the congestion control
    algorithm under WSL1 has been fixed (#1061 / #1126).
  * Error handling and error messages now make more sense in cases
    where sockets were not successfully opened (#1129 / #1132 /
    [#1136], #1135 / #1138, #1128 / #1139).
  * Some buffer overflow hazards were fixed (#1134).
  * It is now possible to use the API to set/get the congestion
    control algorithm (#1036 / #1112).</changelog>
  <changelog author="msvec@suse.com" date="1623067201">- update to 3.10.1:
  * Fixed a problem with autoconf scripts that made builds fail in
    some environments (#1154 / #1155).
  * GNU autoconf 2.71 or newer is now required to regenerate iperf3's
    configure scripts.</changelog>
  <changelog author="msvec@suse.com" date="1646308800">- update to 3.11:
  * Update links to Discussions in documentation
  * Fix DSCP so that TOS = DSCP * 4 (#1162)
  * Fix --bind-dev for TCP streams (#1153)
  * Fix interface specification so doesn't overlap with IPv6 link-local addresses for -c and -B (#1157, #1180)
  * Add get/set test_unit_format function declaration to iperf_api.h
  * Auto adjustment of test-end condition for file transfers (-F), if no end condition is set, it will automatically adjust it to file size in bytes
  * Exit if idle time expires waiting for a connection in one-off mode (#1187, #1197)
  * Support zerocopy by reverse mode (#1204)
  * Update help and manpage text for #1157, support bind device
  * Consistently print target_bandwidth in JSON start section (#1177)
  * Test bitrate added to JSON output (#1168)
  * Remove fsync call after every write to receiving --file (#1176, #1159)
  * Update documentation for -w (#1175)
  * Fix for #952, different JSON object names for bidir reverse channel</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 3.12:
  * cJSON has been updated to version 1.7.15 (#1383).
  * The --bind &lt;host&gt;%&lt;dev&gt; option syntax now works properly (#1360 /
  * A server-side file descriptor leak with the --logfile option has
    been fixed (#1369 / #1360 / #1369 / #1389 / #1393).
  * A bug that caused some large values from TCP_INFO to be misprinted
    as negative numbers has been fixed (#1372).
  * Using the -k or -n flags with --reverse no longer leak into future
    tests (#1363 / #1364).
  * There are now various debug level options available with the
  - -debug option. These can be used to adjust the amount of
    debugging output (#1327).
  * A new --snd-timeout option has been added to set a termination
    timeout for idle TCP connections (#1215 / #1282).
  * iperf3 is slightly more robust to out-of-order packets during UDP
    connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 /
  * iperf3 will now use different ports for each direction when the
  - -cport and --bdir options are set (#1249 / #1259).
  * The iperf3 server will now exit if it can't open its log file
  * Various help message and output fixes have been made (#1299 /
  * Various compiler warnings have been fixed (#1211 / #1316).
  * Operation of bootstrap.sh has been fixed and simplified (#1335 /
  * Flow label support / compatibility under Linux has been improved
  * Various minor memory leaks have been fixed (#1332 / #1333).
  * A getter/setter has been added for the bind_port parameter
    (--cport option). (#1303, #1305)
  * Various internal documentation improvements (#1265 / #1285 / #1304).</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 3.13:
  * Added missing bind_dev getter and setter.
  * a fix for A resource leak bug in function iperf_create_pidfile (#1443)
  * doc: Fix copy-and-paste error leading to wrong error message
  * Fix crash on rcv-timeout with JSON logfile</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- update to 3.14 (bsc#1213430, CVE-2023-38403):
  * fixes a memory allocation hazard that allowed a remote user to
    crash an iperf3 process
  * see
    https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc
  * obsoletes CVE-2023-38403.patch in older dists</changelog>
  <changelog author="dmueller@suse.com" date="1695470400">- update to 3.15 (bsc#1215662, ESNET-SECADV-2023-0002):
  * Several bugs that could allow the iperf3 server to hang waiting
    for input on the control connection has been fixed
    (ESnet Software Security Advisory ESNET-SECADV-2023-0002)
  * A bug that caused garbled output with UDP tests on 32-bit hosts
    has been fixed (PR #1554, PR #1556). This bug was introduced in
    iperf-3.14.
  * A bug in counting UDP messages has been fixed</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 3.16:
  * Multiple test streams started with -P/--parallel will now be
    serviced by different threads. This allows iperf3 to take
    advantage of multiple CPU cores on modern processors, and will
    generally result in significant throughput increases
  * OpenSSL 3 is now detected at build time. If OpenSSL 3 is found,
    various older, deprecated, APIs will not be used. iperf3 will
    continue to work with OpenSSL 1.1.1. OpenSSL is used as a part
    of the iperf3 authentication functionality
  * The authorized users file used by the authentication
    functionality is now checked for accessibility much earlier
    during the program startup, as opposed to being checked near
    the start of a test (Issue #1583, PR #1585).
  * BREAKING CHANGE: iperf3 now requires pthreads and C atomic
    variables to compile and run.</changelog>
  <changelog author="dmueller@suse.com" date="1715774400">- update to 3.17.1 (bsc#1224262, CVE-2024-26306):
  * BREAKING CHANGE: iperf3's authentication features, when used
    with OpenSSL prior to 3.2.0, contain a vulnerability to a
    side-channel timing attack. To address this flaw, a change
    has been made to the padding applied to encrypted strings.
    This change is not backwards compatible with older versions of
    iperf3 (before 3.17). To restore
    the older (vulnerable) behavior, and hence
    backwards-compatibility, use the --use-pkcs1-padding flag. The
    iperf3 team thanks Hubert Kario from RedHat for reporting this
    issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
  * iperf3 no longer changes its current working directory in --daemon
    mode. This results in more predictable behavior with relative
    paths, in particular finding key and credential files for
    authentication. (PR#1672)
  * A new --json-stream option has been added to enable a streaming
    output format, consisting of a series of JSON objects (for the
    start of the test, each measurement interval, and the end of the
    test) separated by newlines (#444, #923, #1098).
  * UDP tests now work correctly between different endian hosts
  * The --fq-rate parameter now works for --reverse tests
  * The statistics reporting interval is now available in the --json
    start test object (#1663).
  * A negative time test duration is now properly flagged as an error
    (IS#1662 / PR#1666).</changelog>
</package>
<package pkgid="771ca01ca9e8672a164b3303e53114e31668402ec57a49c17aa3658881122cfb" name="iperf" arch="s390x">
  <version epoch="0" ver="3.17.1" rel="150000.3.9.1"/>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530878400">- update to 3.6
  * A new --extra-data option can be used to fill in a user-defined
    string field that appears in JSON output.
  * A new --repeating-payload option makes iperf3 use a payload pattern
    similar to that used by iperf2, which could help in recreating
    results that might be affected by payload entropy (for example,
    compression).
  * -B now works properly with SCTP tests.
  * A compile fix for Solaris 10 was added.
  * Some minor bug fixes for JSON output.  In particular, warnings for
    debug and/or verbose modes with --json output and a fix for
    JSON output on CentOS 6</changelog>
  <changelog author="msvec@suse.com" date="1573732800">- update to 3.7
  * Support for simultaneous bidirectional tests with the --bidir flag
  * Use POSIX standard clock_gettime(3) interface for timekeeping where
    available
  * Passwords for authentication can be provided via environment
    variable
  * Specifying --repeating-payload and --reverse now works
  * Failed authentication doesn't count for --one-off
  * Several memory leaks related to authenticated use were fixed
  * The delay for tearing down the control connection for the default
    timed tests has been increased, to more gracefully handle
    high-delay paths
  * Various improvements to the libiperf APIs
  * Fixed build behavior when OpenSSL is absent
  * Portability fixes
- spec file cleanup</changelog>
  <changelog author="msvec@suse.com" date="1594468800">- update to 3.8.1
  * Minor bugfixes and enhancements
- don't apply the profiling patch any more
  (removed iperf-disable-profiling.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1600084800">- update to 3.9:
  * A --timestamps flag has been added, which prepends a timestamp to
    each output line.  An optional argument to this flag, which is a
    format specification to strftime(3), allows for custom timestamp
    formats (#909, #1028).
  * A --server-bitrate-limit flag has been added as a server-side
    command-line argument.  It allows a server to enforce a maximum
    throughput rate; client connections that specify a higher bitrate
    or exceed this bitrate during a test will be terminated.  The
    bitrate is expressed in bits per second, with an optional trailing
    slash and integer count that specifies an averaging interval over
    which to enforce the limit (#999).
  * A bug that caused increased CPU usage with the --bidir option has
    been fixed (#1011).
  * Fixed various minor memory leaks (#1023).</changelog>
  <changelog author="msvec@suse.com" date="1623067200">- update to 3.10:
  * Fix a bug where some --reverse tests didn't terminate (#982 /
    [#1054]).
  * Responsiveness of control connections is slightly improved (#1045
    / #1046 / #1063).
  * The allowable clock skew when doing authentication between client
    and server is now configurable with the new --time-skew-threshold
    (#1065 / #1070).
  * Bitrate throttling using the -b option now works when a burst size
    is specified (#1090).
  * A bug with calculating CPU utilization has been fixed (#1076 /
    [#1077]).
  * A --bind-dev option to support binding sockets to a given network
    interface has been added to make iperf3 work better with
    multi-homed machines and/or VRFs (#817 / #1089 / #1097).
  * --pidfile now works with --client mode (#1110).
  * The server is now less likely to get stuck due to network errors
    (#1101, #1125), controlled by the new --rcv-timeout option.
  * Fixed a few bugs in termination conditions for byte or
    block-limited tests (#1113, #1114, #1115).
  * Added tcp_info.snd_wnd to JSON output (#1148).
  * Some bugs with garbled JSON output have been fixed (#1086, #1118,
    [#1143] / #1146).
  * Support for setting the IPv4 don't-fragment (DF) bit has been
    added with the new --dont-fragment option (#1119).
  * A failure with not being able to read the congestion control
    algorithm under WSL1 has been fixed (#1061 / #1126).
  * Error handling and error messages now make more sense in cases
    where sockets were not successfully opened (#1129 / #1132 /
    [#1136], #1135 / #1138, #1128 / #1139).
  * Some buffer overflow hazards were fixed (#1134).
  * It is now possible to use the API to set/get the congestion
    control algorithm (#1036 / #1112).</changelog>
  <changelog author="msvec@suse.com" date="1623067201">- update to 3.10.1:
  * Fixed a problem with autoconf scripts that made builds fail in
    some environments (#1154 / #1155).
  * GNU autoconf 2.71 or newer is now required to regenerate iperf3's
    configure scripts.</changelog>
  <changelog author="msvec@suse.com" date="1646308800">- update to 3.11:
  * Update links to Discussions in documentation
  * Fix DSCP so that TOS = DSCP * 4 (#1162)
  * Fix --bind-dev for TCP streams (#1153)
  * Fix interface specification so doesn't overlap with IPv6 link-local addresses for -c and -B (#1157, #1180)
  * Add get/set test_unit_format function declaration to iperf_api.h
  * Auto adjustment of test-end condition for file transfers (-F), if no end condition is set, it will automatically adjust it to file size in bytes
  * Exit if idle time expires waiting for a connection in one-off mode (#1187, #1197)
  * Support zerocopy by reverse mode (#1204)
  * Update help and manpage text for #1157, support bind device
  * Consistently print target_bandwidth in JSON start section (#1177)
  * Test bitrate added to JSON output (#1168)
  * Remove fsync call after every write to receiving --file (#1176, #1159)
  * Update documentation for -w (#1175)
  * Fix for #952, different JSON object names for bidir reverse channel</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 3.12:
  * cJSON has been updated to version 1.7.15 (#1383).
  * The --bind &lt;host&gt;%&lt;dev&gt; option syntax now works properly (#1360 /
  * A server-side file descriptor leak with the --logfile option has
    been fixed (#1369 / #1360 / #1369 / #1389 / #1393).
  * A bug that caused some large values from TCP_INFO to be misprinted
    as negative numbers has been fixed (#1372).
  * Using the -k or -n flags with --reverse no longer leak into future
    tests (#1363 / #1364).
  * There are now various debug level options available with the
  - -debug option. These can be used to adjust the amount of
    debugging output (#1327).
  * A new --snd-timeout option has been added to set a termination
    timeout for idle TCP connections (#1215 / #1282).
  * iperf3 is slightly more robust to out-of-order packets during UDP
    connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 /
  * iperf3 will now use different ports for each direction when the
  - -cport and --bdir options are set (#1249 / #1259).
  * The iperf3 server will now exit if it can't open its log file
  * Various help message and output fixes have been made (#1299 /
  * Various compiler warnings have been fixed (#1211 / #1316).
  * Operation of bootstrap.sh has been fixed and simplified (#1335 /
  * Flow label support / compatibility under Linux has been improved
  * Various minor memory leaks have been fixed (#1332 / #1333).
  * A getter/setter has been added for the bind_port parameter
    (--cport option). (#1303, #1305)
  * Various internal documentation improvements (#1265 / #1285 / #1304).</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 3.13:
  * Added missing bind_dev getter and setter.
  * a fix for A resource leak bug in function iperf_create_pidfile (#1443)
  * doc: Fix copy-and-paste error leading to wrong error message
  * Fix crash on rcv-timeout with JSON logfile</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- update to 3.14 (bsc#1213430, CVE-2023-38403):
  * fixes a memory allocation hazard that allowed a remote user to
    crash an iperf3 process
  * see
    https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc
  * obsoletes CVE-2023-38403.patch in older dists</changelog>
  <changelog author="dmueller@suse.com" date="1695470400">- update to 3.15 (bsc#1215662, ESNET-SECADV-2023-0002):
  * Several bugs that could allow the iperf3 server to hang waiting
    for input on the control connection has been fixed
    (ESnet Software Security Advisory ESNET-SECADV-2023-0002)
  * A bug that caused garbled output with UDP tests on 32-bit hosts
    has been fixed (PR #1554, PR #1556). This bug was introduced in
    iperf-3.14.
  * A bug in counting UDP messages has been fixed</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 3.16:
  * Multiple test streams started with -P/--parallel will now be
    serviced by different threads. This allows iperf3 to take
    advantage of multiple CPU cores on modern processors, and will
    generally result in significant throughput increases
  * OpenSSL 3 is now detected at build time. If OpenSSL 3 is found,
    various older, deprecated, APIs will not be used. iperf3 will
    continue to work with OpenSSL 1.1.1. OpenSSL is used as a part
    of the iperf3 authentication functionality
  * The authorized users file used by the authentication
    functionality is now checked for accessibility much earlier
    during the program startup, as opposed to being checked near
    the start of a test (Issue #1583, PR #1585).
  * BREAKING CHANGE: iperf3 now requires pthreads and C atomic
    variables to compile and run.</changelog>
  <changelog author="dmueller@suse.com" date="1715774400">- update to 3.17.1 (bsc#1224262, CVE-2024-26306):
  * BREAKING CHANGE: iperf3's authentication features, when used
    with OpenSSL prior to 3.2.0, contain a vulnerability to a
    side-channel timing attack. To address this flaw, a change
    has been made to the padding applied to encrypted strings.
    This change is not backwards compatible with older versions of
    iperf3 (before 3.17). To restore
    the older (vulnerable) behavior, and hence
    backwards-compatibility, use the --use-pkcs1-padding flag. The
    iperf3 team thanks Hubert Kario from RedHat for reporting this
    issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
  * iperf3 no longer changes its current working directory in --daemon
    mode. This results in more predictable behavior with relative
    paths, in particular finding key and credential files for
    authentication. (PR#1672)
  * A new --json-stream option has been added to enable a streaming
    output format, consisting of a series of JSON objects (for the
    start of the test, each measurement interval, and the end of the
    test) separated by newlines (#444, #923, #1098).
  * UDP tests now work correctly between different endian hosts
  * The --fq-rate parameter now works for --reverse tests
  * The statistics reporting interval is now available in the --json
    start test object (#1663).
  * A negative time test duration is now properly flagged as an error
    (IS#1662 / PR#1666).</changelog>
</package>
<package pkgid="f237bc21a9fe605a903ede0e724cd3bad671a19c937879a4b5133c5aac2d54ca" name="iperf" arch="src">
  <version epoch="0" ver="3.17.1" rel="150000.3.9.1"/>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530878400">- update to 3.6
  * A new --extra-data option can be used to fill in a user-defined
    string field that appears in JSON output.
  * A new --repeating-payload option makes iperf3 use a payload pattern
    similar to that used by iperf2, which could help in recreating
    results that might be affected by payload entropy (for example,
    compression).
  * -B now works properly with SCTP tests.
  * A compile fix for Solaris 10 was added.
  * Some minor bug fixes for JSON output.  In particular, warnings for
    debug and/or verbose modes with --json output and a fix for
    JSON output on CentOS 6</changelog>
  <changelog author="msvec@suse.com" date="1573732800">- update to 3.7
  * Support for simultaneous bidirectional tests with the --bidir flag
  * Use POSIX standard clock_gettime(3) interface for timekeeping where
    available
  * Passwords for authentication can be provided via environment
    variable
  * Specifying --repeating-payload and --reverse now works
  * Failed authentication doesn't count for --one-off
  * Several memory leaks related to authenticated use were fixed
  * The delay for tearing down the control connection for the default
    timed tests has been increased, to more gracefully handle
    high-delay paths
  * Various improvements to the libiperf APIs
  * Fixed build behavior when OpenSSL is absent
  * Portability fixes
- spec file cleanup</changelog>
  <changelog author="msvec@suse.com" date="1594468800">- update to 3.8.1
  * Minor bugfixes and enhancements
- don't apply the profiling patch any more
  (removed iperf-disable-profiling.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1600084800">- update to 3.9:
  * A --timestamps flag has been added, which prepends a timestamp to
    each output line.  An optional argument to this flag, which is a
    format specification to strftime(3), allows for custom timestamp
    formats (#909, #1028).
  * A --server-bitrate-limit flag has been added as a server-side
    command-line argument.  It allows a server to enforce a maximum
    throughput rate; client connections that specify a higher bitrate
    or exceed this bitrate during a test will be terminated.  The
    bitrate is expressed in bits per second, with an optional trailing
    slash and integer count that specifies an averaging interval over
    which to enforce the limit (#999).
  * A bug that caused increased CPU usage with the --bidir option has
    been fixed (#1011).
  * Fixed various minor memory leaks (#1023).</changelog>
  <changelog author="msvec@suse.com" date="1623067200">- update to 3.10:
  * Fix a bug where some --reverse tests didn't terminate (#982 /
    [#1054]).
  * Responsiveness of control connections is slightly improved (#1045
    / #1046 / #1063).
  * The allowable clock skew when doing authentication between client
    and server is now configurable with the new --time-skew-threshold
    (#1065 / #1070).
  * Bitrate throttling using the -b option now works when a burst size
    is specified (#1090).
  * A bug with calculating CPU utilization has been fixed (#1076 /
    [#1077]).
  * A --bind-dev option to support binding sockets to a given network
    interface has been added to make iperf3 work better with
    multi-homed machines and/or VRFs (#817 / #1089 / #1097).
  * --pidfile now works with --client mode (#1110).
  * The server is now less likely to get stuck due to network errors
    (#1101, #1125), controlled by the new --rcv-timeout option.
  * Fixed a few bugs in termination conditions for byte or
    block-limited tests (#1113, #1114, #1115).
  * Added tcp_info.snd_wnd to JSON output (#1148).
  * Some bugs with garbled JSON output have been fixed (#1086, #1118,
    [#1143] / #1146).
  * Support for setting the IPv4 don't-fragment (DF) bit has been
    added with the new --dont-fragment option (#1119).
  * A failure with not being able to read the congestion control
    algorithm under WSL1 has been fixed (#1061 / #1126).
  * Error handling and error messages now make more sense in cases
    where sockets were not successfully opened (#1129 / #1132 /
    [#1136], #1135 / #1138, #1128 / #1139).
  * Some buffer overflow hazards were fixed (#1134).
  * It is now possible to use the API to set/get the congestion
    control algorithm (#1036 / #1112).</changelog>
  <changelog author="msvec@suse.com" date="1623067201">- update to 3.10.1:
  * Fixed a problem with autoconf scripts that made builds fail in
    some environments (#1154 / #1155).
  * GNU autoconf 2.71 or newer is now required to regenerate iperf3's
    configure scripts.</changelog>
  <changelog author="msvec@suse.com" date="1646308800">- update to 3.11:
  * Update links to Discussions in documentation
  * Fix DSCP so that TOS = DSCP * 4 (#1162)
  * Fix --bind-dev for TCP streams (#1153)
  * Fix interface specification so doesn't overlap with IPv6 link-local addresses for -c and -B (#1157, #1180)
  * Add get/set test_unit_format function declaration to iperf_api.h
  * Auto adjustment of test-end condition for file transfers (-F), if no end condition is set, it will automatically adjust it to file size in bytes
  * Exit if idle time expires waiting for a connection in one-off mode (#1187, #1197)
  * Support zerocopy by reverse mode (#1204)
  * Update help and manpage text for #1157, support bind device
  * Consistently print target_bandwidth in JSON start section (#1177)
  * Test bitrate added to JSON output (#1168)
  * Remove fsync call after every write to receiving --file (#1176, #1159)
  * Update documentation for -w (#1175)
  * Fix for #952, different JSON object names for bidir reverse channel</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 3.12:
  * cJSON has been updated to version 1.7.15 (#1383).
  * The --bind &lt;host&gt;%&lt;dev&gt; option syntax now works properly (#1360 /
  * A server-side file descriptor leak with the --logfile option has
    been fixed (#1369 / #1360 / #1369 / #1389 / #1393).
  * A bug that caused some large values from TCP_INFO to be misprinted
    as negative numbers has been fixed (#1372).
  * Using the -k or -n flags with --reverse no longer leak into future
    tests (#1363 / #1364).
  * There are now various debug level options available with the
  - -debug option. These can be used to adjust the amount of
    debugging output (#1327).
  * A new --snd-timeout option has been added to set a termination
    timeout for idle TCP connections (#1215 / #1282).
  * iperf3 is slightly more robust to out-of-order packets during UDP
    connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 /
  * iperf3 will now use different ports for each direction when the
  - -cport and --bdir options are set (#1249 / #1259).
  * The iperf3 server will now exit if it can't open its log file
  * Various help message and output fixes have been made (#1299 /
  * Various compiler warnings have been fixed (#1211 / #1316).
  * Operation of bootstrap.sh has been fixed and simplified (#1335 /
  * Flow label support / compatibility under Linux has been improved
  * Various minor memory leaks have been fixed (#1332 / #1333).
  * A getter/setter has been added for the bind_port parameter
    (--cport option). (#1303, #1305)
  * Various internal documentation improvements (#1265 / #1285 / #1304).</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 3.13:
  * Added missing bind_dev getter and setter.
  * a fix for A resource leak bug in function iperf_create_pidfile (#1443)
  * doc: Fix copy-and-paste error leading to wrong error message
  * Fix crash on rcv-timeout with JSON logfile</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- update to 3.14 (bsc#1213430, CVE-2023-38403):
  * fixes a memory allocation hazard that allowed a remote user to
    crash an iperf3 process
  * see
    https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc
  * obsoletes CVE-2023-38403.patch in older dists</changelog>
  <changelog author="dmueller@suse.com" date="1695470400">- update to 3.15 (bsc#1215662, ESNET-SECADV-2023-0002):
  * Several bugs that could allow the iperf3 server to hang waiting
    for input on the control connection has been fixed
    (ESnet Software Security Advisory ESNET-SECADV-2023-0002)
  * A bug that caused garbled output with UDP tests on 32-bit hosts
    has been fixed (PR #1554, PR #1556). This bug was introduced in
    iperf-3.14.
  * A bug in counting UDP messages has been fixed</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 3.16:
  * Multiple test streams started with -P/--parallel will now be
    serviced by different threads. This allows iperf3 to take
    advantage of multiple CPU cores on modern processors, and will
    generally result in significant throughput increases
  * OpenSSL 3 is now detected at build time. If OpenSSL 3 is found,
    various older, deprecated, APIs will not be used. iperf3 will
    continue to work with OpenSSL 1.1.1. OpenSSL is used as a part
    of the iperf3 authentication functionality
  * The authorized users file used by the authentication
    functionality is now checked for accessibility much earlier
    during the program startup, as opposed to being checked near
    the start of a test (Issue #1583, PR #1585).
  * BREAKING CHANGE: iperf3 now requires pthreads and C atomic
    variables to compile and run.</changelog>
  <changelog author="dmueller@suse.com" date="1715774400">- update to 3.17.1 (bsc#1224262, CVE-2024-26306):
  * BREAKING CHANGE: iperf3's authentication features, when used
    with OpenSSL prior to 3.2.0, contain a vulnerability to a
    side-channel timing attack. To address this flaw, a change
    has been made to the padding applied to encrypted strings.
    This change is not backwards compatible with older versions of
    iperf3 (before 3.17). To restore
    the older (vulnerable) behavior, and hence
    backwards-compatibility, use the --use-pkcs1-padding flag. The
    iperf3 team thanks Hubert Kario from RedHat for reporting this
    issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
  * iperf3 no longer changes its current working directory in --daemon
    mode. This results in more predictable behavior with relative
    paths, in particular finding key and credential files for
    authentication. (PR#1672)
  * A new --json-stream option has been added to enable a streaming
    output format, consisting of a series of JSON objects (for the
    start of the test, each measurement interval, and the end of the
    test) separated by newlines (#444, #923, #1098).
  * UDP tests now work correctly between different endian hosts
  * The --fq-rate parameter now works for --reverse tests
  * The statistics reporting interval is now available in the --json
    start test object (#1663).
  * A negative time test duration is now properly flagged as an error
    (IS#1662 / PR#1666).</changelog>
</package>
<package pkgid="458416b3e1754fac30fb392b2ebd3ab0fcee5f4cfc0090fcd6ab6f59b2ed875a" name="iperf" arch="x86_64">
  <version epoch="0" ver="3.17.1" rel="150000.3.9.1"/>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530878400">- update to 3.6
  * A new --extra-data option can be used to fill in a user-defined
    string field that appears in JSON output.
  * A new --repeating-payload option makes iperf3 use a payload pattern
    similar to that used by iperf2, which could help in recreating
    results that might be affected by payload entropy (for example,
    compression).
  * -B now works properly with SCTP tests.
  * A compile fix for Solaris 10 was added.
  * Some minor bug fixes for JSON output.  In particular, warnings for
    debug and/or verbose modes with --json output and a fix for
    JSON output on CentOS 6</changelog>
  <changelog author="msvec@suse.com" date="1573732800">- update to 3.7
  * Support for simultaneous bidirectional tests with the --bidir flag
  * Use POSIX standard clock_gettime(3) interface for timekeeping where
    available
  * Passwords for authentication can be provided via environment
    variable
  * Specifying --repeating-payload and --reverse now works
  * Failed authentication doesn't count for --one-off
  * Several memory leaks related to authenticated use were fixed
  * The delay for tearing down the control connection for the default
    timed tests has been increased, to more gracefully handle
    high-delay paths
  * Various improvements to the libiperf APIs
  * Fixed build behavior when OpenSSL is absent
  * Portability fixes
- spec file cleanup</changelog>
  <changelog author="msvec@suse.com" date="1594468800">- update to 3.8.1
  * Minor bugfixes and enhancements
- don't apply the profiling patch any more
  (removed iperf-disable-profiling.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1600084800">- update to 3.9:
  * A --timestamps flag has been added, which prepends a timestamp to
    each output line.  An optional argument to this flag, which is a
    format specification to strftime(3), allows for custom timestamp
    formats (#909, #1028).
  * A --server-bitrate-limit flag has been added as a server-side
    command-line argument.  It allows a server to enforce a maximum
    throughput rate; client connections that specify a higher bitrate
    or exceed this bitrate during a test will be terminated.  The
    bitrate is expressed in bits per second, with an optional trailing
    slash and integer count that specifies an averaging interval over
    which to enforce the limit (#999).
  * A bug that caused increased CPU usage with the --bidir option has
    been fixed (#1011).
  * Fixed various minor memory leaks (#1023).</changelog>
  <changelog author="msvec@suse.com" date="1623067200">- update to 3.10:
  * Fix a bug where some --reverse tests didn't terminate (#982 /
    [#1054]).
  * Responsiveness of control connections is slightly improved (#1045
    / #1046 / #1063).
  * The allowable clock skew when doing authentication between client
    and server is now configurable with the new --time-skew-threshold
    (#1065 / #1070).
  * Bitrate throttling using the -b option now works when a burst size
    is specified (#1090).
  * A bug with calculating CPU utilization has been fixed (#1076 /
    [#1077]).
  * A --bind-dev option to support binding sockets to a given network
    interface has been added to make iperf3 work better with
    multi-homed machines and/or VRFs (#817 / #1089 / #1097).
  * --pidfile now works with --client mode (#1110).
  * The server is now less likely to get stuck due to network errors
    (#1101, #1125), controlled by the new --rcv-timeout option.
  * Fixed a few bugs in termination conditions for byte or
    block-limited tests (#1113, #1114, #1115).
  * Added tcp_info.snd_wnd to JSON output (#1148).
  * Some bugs with garbled JSON output have been fixed (#1086, #1118,
    [#1143] / #1146).
  * Support for setting the IPv4 don't-fragment (DF) bit has been
    added with the new --dont-fragment option (#1119).
  * A failure with not being able to read the congestion control
    algorithm under WSL1 has been fixed (#1061 / #1126).
  * Error handling and error messages now make more sense in cases
    where sockets were not successfully opened (#1129 / #1132 /
    [#1136], #1135 / #1138, #1128 / #1139).
  * Some buffer overflow hazards were fixed (#1134).
  * It is now possible to use the API to set/get the congestion
    control algorithm (#1036 / #1112).</changelog>
  <changelog author="msvec@suse.com" date="1623067201">- update to 3.10.1:
  * Fixed a problem with autoconf scripts that made builds fail in
    some environments (#1154 / #1155).
  * GNU autoconf 2.71 or newer is now required to regenerate iperf3's
    configure scripts.</changelog>
  <changelog author="msvec@suse.com" date="1646308800">- update to 3.11:
  * Update links to Discussions in documentation
  * Fix DSCP so that TOS = DSCP * 4 (#1162)
  * Fix --bind-dev for TCP streams (#1153)
  * Fix interface specification so doesn't overlap with IPv6 link-local addresses for -c and -B (#1157, #1180)
  * Add get/set test_unit_format function declaration to iperf_api.h
  * Auto adjustment of test-end condition for file transfers (-F), if no end condition is set, it will automatically adjust it to file size in bytes
  * Exit if idle time expires waiting for a connection in one-off mode (#1187, #1197)
  * Support zerocopy by reverse mode (#1204)
  * Update help and manpage text for #1157, support bind device
  * Consistently print target_bandwidth in JSON start section (#1177)
  * Test bitrate added to JSON output (#1168)
  * Remove fsync call after every write to receiving --file (#1176, #1159)
  * Update documentation for -w (#1175)
  * Fix for #952, different JSON object names for bidir reverse channel</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 3.12:
  * cJSON has been updated to version 1.7.15 (#1383).
  * The --bind &lt;host&gt;%&lt;dev&gt; option syntax now works properly (#1360 /
  * A server-side file descriptor leak with the --logfile option has
    been fixed (#1369 / #1360 / #1369 / #1389 / #1393).
  * A bug that caused some large values from TCP_INFO to be misprinted
    as negative numbers has been fixed (#1372).
  * Using the -k or -n flags with --reverse no longer leak into future
    tests (#1363 / #1364).
  * There are now various debug level options available with the
  - -debug option. These can be used to adjust the amount of
    debugging output (#1327).
  * A new --snd-timeout option has been added to set a termination
    timeout for idle TCP connections (#1215 / #1282).
  * iperf3 is slightly more robust to out-of-order packets during UDP
    connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 /
  * iperf3 will now use different ports for each direction when the
  - -cport and --bdir options are set (#1249 / #1259).
  * The iperf3 server will now exit if it can't open its log file
  * Various help message and output fixes have been made (#1299 /
  * Various compiler warnings have been fixed (#1211 / #1316).
  * Operation of bootstrap.sh has been fixed and simplified (#1335 /
  * Flow label support / compatibility under Linux has been improved
  * Various minor memory leaks have been fixed (#1332 / #1333).
  * A getter/setter has been added for the bind_port parameter
    (--cport option). (#1303, #1305)
  * Various internal documentation improvements (#1265 / #1285 / #1304).</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 3.13:
  * Added missing bind_dev getter and setter.
  * a fix for A resource leak bug in function iperf_create_pidfile (#1443)
  * doc: Fix copy-and-paste error leading to wrong error message
  * Fix crash on rcv-timeout with JSON logfile</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- update to 3.14 (bsc#1213430, CVE-2023-38403):
  * fixes a memory allocation hazard that allowed a remote user to
    crash an iperf3 process
  * see
    https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc
  * obsoletes CVE-2023-38403.patch in older dists</changelog>
  <changelog author="dmueller@suse.com" date="1695470400">- update to 3.15 (bsc#1215662, ESNET-SECADV-2023-0002):
  * Several bugs that could allow the iperf3 server to hang waiting
    for input on the control connection has been fixed
    (ESnet Software Security Advisory ESNET-SECADV-2023-0002)
  * A bug that caused garbled output with UDP tests on 32-bit hosts
    has been fixed (PR #1554, PR #1556). This bug was introduced in
    iperf-3.14.
  * A bug in counting UDP messages has been fixed</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 3.16:
  * Multiple test streams started with -P/--parallel will now be
    serviced by different threads. This allows iperf3 to take
    advantage of multiple CPU cores on modern processors, and will
    generally result in significant throughput increases
  * OpenSSL 3 is now detected at build time. If OpenSSL 3 is found,
    various older, deprecated, APIs will not be used. iperf3 will
    continue to work with OpenSSL 1.1.1. OpenSSL is used as a part
    of the iperf3 authentication functionality
  * The authorized users file used by the authentication
    functionality is now checked for accessibility much earlier
    during the program startup, as opposed to being checked near
    the start of a test (Issue #1583, PR #1585).
  * BREAKING CHANGE: iperf3 now requires pthreads and C atomic
    variables to compile and run.</changelog>
  <changelog author="dmueller@suse.com" date="1715774400">- update to 3.17.1 (bsc#1224262, CVE-2024-26306):
  * BREAKING CHANGE: iperf3's authentication features, when used
    with OpenSSL prior to 3.2.0, contain a vulnerability to a
    side-channel timing attack. To address this flaw, a change
    has been made to the padding applied to encrypted strings.
    This change is not backwards compatible with older versions of
    iperf3 (before 3.17). To restore
    the older (vulnerable) behavior, and hence
    backwards-compatibility, use the --use-pkcs1-padding flag. The
    iperf3 team thanks Hubert Kario from RedHat for reporting this
    issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
  * iperf3 no longer changes its current working directory in --daemon
    mode. This results in more predictable behavior with relative
    paths, in particular finding key and credential files for
    authentication. (PR#1672)
  * A new --json-stream option has been added to enable a streaming
    output format, consisting of a series of JSON objects (for the
    start of the test, each measurement interval, and the end of the
    test) separated by newlines (#444, #923, #1098).
  * UDP tests now work correctly between different endian hosts
  * The --fq-rate parameter now works for --reverse tests
  * The statistics reporting interval is now available in the --json
    start test object (#1663).
  * A negative time test duration is now properly flagged as an error
    (IS#1662 / PR#1666).</changelog>
</package>
<package pkgid="599252f539cc616b94e048f67f4f3ae024b46142207fc460a6af7ab9e45fa387" name="iperf-devel" arch="aarch64">
  <version epoch="0" ver="3.17.1" rel="150000.3.9.1"/>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530878400">- update to 3.6
  * A new --extra-data option can be used to fill in a user-defined
    string field that appears in JSON output.
  * A new --repeating-payload option makes iperf3 use a payload pattern
    similar to that used by iperf2, which could help in recreating
    results that might be affected by payload entropy (for example,
    compression).
  * -B now works properly with SCTP tests.
  * A compile fix for Solaris 10 was added.
  * Some minor bug fixes for JSON output.  In particular, warnings for
    debug and/or verbose modes with --json output and a fix for
    JSON output on CentOS 6</changelog>
  <changelog author="msvec@suse.com" date="1573732800">- update to 3.7
  * Support for simultaneous bidirectional tests with the --bidir flag
  * Use POSIX standard clock_gettime(3) interface for timekeeping where
    available
  * Passwords for authentication can be provided via environment
    variable
  * Specifying --repeating-payload and --reverse now works
  * Failed authentication doesn't count for --one-off
  * Several memory leaks related to authenticated use were fixed
  * The delay for tearing down the control connection for the default
    timed tests has been increased, to more gracefully handle
    high-delay paths
  * Various improvements to the libiperf APIs
  * Fixed build behavior when OpenSSL is absent
  * Portability fixes
- spec file cleanup</changelog>
  <changelog author="msvec@suse.com" date="1594468800">- update to 3.8.1
  * Minor bugfixes and enhancements
- don't apply the profiling patch any more
  (removed iperf-disable-profiling.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1600084800">- update to 3.9:
  * A --timestamps flag has been added, which prepends a timestamp to
    each output line.  An optional argument to this flag, which is a
    format specification to strftime(3), allows for custom timestamp
    formats (#909, #1028).
  * A --server-bitrate-limit flag has been added as a server-side
    command-line argument.  It allows a server to enforce a maximum
    throughput rate; client connections that specify a higher bitrate
    or exceed this bitrate during a test will be terminated.  The
    bitrate is expressed in bits per second, with an optional trailing
    slash and integer count that specifies an averaging interval over
    which to enforce the limit (#999).
  * A bug that caused increased CPU usage with the --bidir option has
    been fixed (#1011).
  * Fixed various minor memory leaks (#1023).</changelog>
  <changelog author="msvec@suse.com" date="1623067200">- update to 3.10:
  * Fix a bug where some --reverse tests didn't terminate (#982 /
    [#1054]).
  * Responsiveness of control connections is slightly improved (#1045
    / #1046 / #1063).
  * The allowable clock skew when doing authentication between client
    and server is now configurable with the new --time-skew-threshold
    (#1065 / #1070).
  * Bitrate throttling using the -b option now works when a burst size
    is specified (#1090).
  * A bug with calculating CPU utilization has been fixed (#1076 /
    [#1077]).
  * A --bind-dev option to support binding sockets to a given network
    interface has been added to make iperf3 work better with
    multi-homed machines and/or VRFs (#817 / #1089 / #1097).
  * --pidfile now works with --client mode (#1110).
  * The server is now less likely to get stuck due to network errors
    (#1101, #1125), controlled by the new --rcv-timeout option.
  * Fixed a few bugs in termination conditions for byte or
    block-limited tests (#1113, #1114, #1115).
  * Added tcp_info.snd_wnd to JSON output (#1148).
  * Some bugs with garbled JSON output have been fixed (#1086, #1118,
    [#1143] / #1146).
  * Support for setting the IPv4 don't-fragment (DF) bit has been
    added with the new --dont-fragment option (#1119).
  * A failure with not being able to read the congestion control
    algorithm under WSL1 has been fixed (#1061 / #1126).
  * Error handling and error messages now make more sense in cases
    where sockets were not successfully opened (#1129 / #1132 /
    [#1136], #1135 / #1138, #1128 / #1139).
  * Some buffer overflow hazards were fixed (#1134).
  * It is now possible to use the API to set/get the congestion
    control algorithm (#1036 / #1112).</changelog>
  <changelog author="msvec@suse.com" date="1623067201">- update to 3.10.1:
  * Fixed a problem with autoconf scripts that made builds fail in
    some environments (#1154 / #1155).
  * GNU autoconf 2.71 or newer is now required to regenerate iperf3's
    configure scripts.</changelog>
  <changelog author="msvec@suse.com" date="1646308800">- update to 3.11:
  * Update links to Discussions in documentation
  * Fix DSCP so that TOS = DSCP * 4 (#1162)
  * Fix --bind-dev for TCP streams (#1153)
  * Fix interface specification so doesn't overlap with IPv6 link-local addresses for -c and -B (#1157, #1180)
  * Add get/set test_unit_format function declaration to iperf_api.h
  * Auto adjustment of test-end condition for file transfers (-F), if no end condition is set, it will automatically adjust it to file size in bytes
  * Exit if idle time expires waiting for a connection in one-off mode (#1187, #1197)
  * Support zerocopy by reverse mode (#1204)
  * Update help and manpage text for #1157, support bind device
  * Consistently print target_bandwidth in JSON start section (#1177)
  * Test bitrate added to JSON output (#1168)
  * Remove fsync call after every write to receiving --file (#1176, #1159)
  * Update documentation for -w (#1175)
  * Fix for #952, different JSON object names for bidir reverse channel</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 3.12:
  * cJSON has been updated to version 1.7.15 (#1383).
  * The --bind &lt;host&gt;%&lt;dev&gt; option syntax now works properly (#1360 /
  * A server-side file descriptor leak with the --logfile option has
    been fixed (#1369 / #1360 / #1369 / #1389 / #1393).
  * A bug that caused some large values from TCP_INFO to be misprinted
    as negative numbers has been fixed (#1372).
  * Using the -k or -n flags with --reverse no longer leak into future
    tests (#1363 / #1364).
  * There are now various debug level options available with the
  - -debug option. These can be used to adjust the amount of
    debugging output (#1327).
  * A new --snd-timeout option has been added to set a termination
    timeout for idle TCP connections (#1215 / #1282).
  * iperf3 is slightly more robust to out-of-order packets during UDP
    connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 /
  * iperf3 will now use different ports for each direction when the
  - -cport and --bdir options are set (#1249 / #1259).
  * The iperf3 server will now exit if it can't open its log file
  * Various help message and output fixes have been made (#1299 /
  * Various compiler warnings have been fixed (#1211 / #1316).
  * Operation of bootstrap.sh has been fixed and simplified (#1335 /
  * Flow label support / compatibility under Linux has been improved
  * Various minor memory leaks have been fixed (#1332 / #1333).
  * A getter/setter has been added for the bind_port parameter
    (--cport option). (#1303, #1305)
  * Various internal documentation improvements (#1265 / #1285 / #1304).</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 3.13:
  * Added missing bind_dev getter and setter.
  * a fix for A resource leak bug in function iperf_create_pidfile (#1443)
  * doc: Fix copy-and-paste error leading to wrong error message
  * Fix crash on rcv-timeout with JSON logfile</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- update to 3.14 (bsc#1213430, CVE-2023-38403):
  * fixes a memory allocation hazard that allowed a remote user to
    crash an iperf3 process
  * see
    https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc
  * obsoletes CVE-2023-38403.patch in older dists</changelog>
  <changelog author="dmueller@suse.com" date="1695470400">- update to 3.15 (bsc#1215662, ESNET-SECADV-2023-0002):
  * Several bugs that could allow the iperf3 server to hang waiting
    for input on the control connection has been fixed
    (ESnet Software Security Advisory ESNET-SECADV-2023-0002)
  * A bug that caused garbled output with UDP tests on 32-bit hosts
    has been fixed (PR #1554, PR #1556). This bug was introduced in
    iperf-3.14.
  * A bug in counting UDP messages has been fixed</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 3.16:
  * Multiple test streams started with -P/--parallel will now be
    serviced by different threads. This allows iperf3 to take
    advantage of multiple CPU cores on modern processors, and will
    generally result in significant throughput increases
  * OpenSSL 3 is now detected at build time. If OpenSSL 3 is found,
    various older, deprecated, APIs will not be used. iperf3 will
    continue to work with OpenSSL 1.1.1. OpenSSL is used as a part
    of the iperf3 authentication functionality
  * The authorized users file used by the authentication
    functionality is now checked for accessibility much earlier
    during the program startup, as opposed to being checked near
    the start of a test (Issue #1583, PR #1585).
  * BREAKING CHANGE: iperf3 now requires pthreads and C atomic
    variables to compile and run.</changelog>
  <changelog author="dmueller@suse.com" date="1715774400">- update to 3.17.1 (bsc#1224262, CVE-2024-26306):
  * BREAKING CHANGE: iperf3's authentication features, when used
    with OpenSSL prior to 3.2.0, contain a vulnerability to a
    side-channel timing attack. To address this flaw, a change
    has been made to the padding applied to encrypted strings.
    This change is not backwards compatible with older versions of
    iperf3 (before 3.17). To restore
    the older (vulnerable) behavior, and hence
    backwards-compatibility, use the --use-pkcs1-padding flag. The
    iperf3 team thanks Hubert Kario from RedHat for reporting this
    issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
  * iperf3 no longer changes its current working directory in --daemon
    mode. This results in more predictable behavior with relative
    paths, in particular finding key and credential files for
    authentication. (PR#1672)
  * A new --json-stream option has been added to enable a streaming
    output format, consisting of a series of JSON objects (for the
    start of the test, each measurement interval, and the end of the
    test) separated by newlines (#444, #923, #1098).
  * UDP tests now work correctly between different endian hosts
  * The --fq-rate parameter now works for --reverse tests
  * The statistics reporting interval is now available in the --json
    start test object (#1663).
  * A negative time test duration is now properly flagged as an error
    (IS#1662 / PR#1666).</changelog>
</package>
<package pkgid="39363361eb7a6968185db081cc0455da56d826ac314af2bbdad8f7d3819d5c65" name="iperf-devel" arch="ppc64le">
  <version epoch="0" ver="3.17.1" rel="150000.3.9.1"/>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530878400">- update to 3.6
  * A new --extra-data option can be used to fill in a user-defined
    string field that appears in JSON output.
  * A new --repeating-payload option makes iperf3 use a payload pattern
    similar to that used by iperf2, which could help in recreating
    results that might be affected by payload entropy (for example,
    compression).
  * -B now works properly with SCTP tests.
  * A compile fix for Solaris 10 was added.
  * Some minor bug fixes for JSON output.  In particular, warnings for
    debug and/or verbose modes with --json output and a fix for
    JSON output on CentOS 6</changelog>
  <changelog author="msvec@suse.com" date="1573732800">- update to 3.7
  * Support for simultaneous bidirectional tests with the --bidir flag
  * Use POSIX standard clock_gettime(3) interface for timekeeping where
    available
  * Passwords for authentication can be provided via environment
    variable
  * Specifying --repeating-payload and --reverse now works
  * Failed authentication doesn't count for --one-off
  * Several memory leaks related to authenticated use were fixed
  * The delay for tearing down the control connection for the default
    timed tests has been increased, to more gracefully handle
    high-delay paths
  * Various improvements to the libiperf APIs
  * Fixed build behavior when OpenSSL is absent
  * Portability fixes
- spec file cleanup</changelog>
  <changelog author="msvec@suse.com" date="1594468800">- update to 3.8.1
  * Minor bugfixes and enhancements
- don't apply the profiling patch any more
  (removed iperf-disable-profiling.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1600084800">- update to 3.9:
  * A --timestamps flag has been added, which prepends a timestamp to
    each output line.  An optional argument to this flag, which is a
    format specification to strftime(3), allows for custom timestamp
    formats (#909, #1028).
  * A --server-bitrate-limit flag has been added as a server-side
    command-line argument.  It allows a server to enforce a maximum
    throughput rate; client connections that specify a higher bitrate
    or exceed this bitrate during a test will be terminated.  The
    bitrate is expressed in bits per second, with an optional trailing
    slash and integer count that specifies an averaging interval over
    which to enforce the limit (#999).
  * A bug that caused increased CPU usage with the --bidir option has
    been fixed (#1011).
  * Fixed various minor memory leaks (#1023).</changelog>
  <changelog author="msvec@suse.com" date="1623067200">- update to 3.10:
  * Fix a bug where some --reverse tests didn't terminate (#982 /
    [#1054]).
  * Responsiveness of control connections is slightly improved (#1045
    / #1046 / #1063).
  * The allowable clock skew when doing authentication between client
    and server is now configurable with the new --time-skew-threshold
    (#1065 / #1070).
  * Bitrate throttling using the -b option now works when a burst size
    is specified (#1090).
  * A bug with calculating CPU utilization has been fixed (#1076 /
    [#1077]).
  * A --bind-dev option to support binding sockets to a given network
    interface has been added to make iperf3 work better with
    multi-homed machines and/or VRFs (#817 / #1089 / #1097).
  * --pidfile now works with --client mode (#1110).
  * The server is now less likely to get stuck due to network errors
    (#1101, #1125), controlled by the new --rcv-timeout option.
  * Fixed a few bugs in termination conditions for byte or
    block-limited tests (#1113, #1114, #1115).
  * Added tcp_info.snd_wnd to JSON output (#1148).
  * Some bugs with garbled JSON output have been fixed (#1086, #1118,
    [#1143] / #1146).
  * Support for setting the IPv4 don't-fragment (DF) bit has been
    added with the new --dont-fragment option (#1119).
  * A failure with not being able to read the congestion control
    algorithm under WSL1 has been fixed (#1061 / #1126).
  * Error handling and error messages now make more sense in cases
    where sockets were not successfully opened (#1129 / #1132 /
    [#1136], #1135 / #1138, #1128 / #1139).
  * Some buffer overflow hazards were fixed (#1134).
  * It is now possible to use the API to set/get the congestion
    control algorithm (#1036 / #1112).</changelog>
  <changelog author="msvec@suse.com" date="1623067201">- update to 3.10.1:
  * Fixed a problem with autoconf scripts that made builds fail in
    some environments (#1154 / #1155).
  * GNU autoconf 2.71 or newer is now required to regenerate iperf3's
    configure scripts.</changelog>
  <changelog author="msvec@suse.com" date="1646308800">- update to 3.11:
  * Update links to Discussions in documentation
  * Fix DSCP so that TOS = DSCP * 4 (#1162)
  * Fix --bind-dev for TCP streams (#1153)
  * Fix interface specification so doesn't overlap with IPv6 link-local addresses for -c and -B (#1157, #1180)
  * Add get/set test_unit_format function declaration to iperf_api.h
  * Auto adjustment of test-end condition for file transfers (-F), if no end condition is set, it will automatically adjust it to file size in bytes
  * Exit if idle time expires waiting for a connection in one-off mode (#1187, #1197)
  * Support zerocopy by reverse mode (#1204)
  * Update help and manpage text for #1157, support bind device
  * Consistently print target_bandwidth in JSON start section (#1177)
  * Test bitrate added to JSON output (#1168)
  * Remove fsync call after every write to receiving --file (#1176, #1159)
  * Update documentation for -w (#1175)
  * Fix for #952, different JSON object names for bidir reverse channel</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 3.12:
  * cJSON has been updated to version 1.7.15 (#1383).
  * The --bind &lt;host&gt;%&lt;dev&gt; option syntax now works properly (#1360 /
  * A server-side file descriptor leak with the --logfile option has
    been fixed (#1369 / #1360 / #1369 / #1389 / #1393).
  * A bug that caused some large values from TCP_INFO to be misprinted
    as negative numbers has been fixed (#1372).
  * Using the -k or -n flags with --reverse no longer leak into future
    tests (#1363 / #1364).
  * There are now various debug level options available with the
  - -debug option. These can be used to adjust the amount of
    debugging output (#1327).
  * A new --snd-timeout option has been added to set a termination
    timeout for idle TCP connections (#1215 / #1282).
  * iperf3 is slightly more robust to out-of-order packets during UDP
    connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 /
  * iperf3 will now use different ports for each direction when the
  - -cport and --bdir options are set (#1249 / #1259).
  * The iperf3 server will now exit if it can't open its log file
  * Various help message and output fixes have been made (#1299 /
  * Various compiler warnings have been fixed (#1211 / #1316).
  * Operation of bootstrap.sh has been fixed and simplified (#1335 /
  * Flow label support / compatibility under Linux has been improved
  * Various minor memory leaks have been fixed (#1332 / #1333).
  * A getter/setter has been added for the bind_port parameter
    (--cport option). (#1303, #1305)
  * Various internal documentation improvements (#1265 / #1285 / #1304).</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 3.13:
  * Added missing bind_dev getter and setter.
  * a fix for A resource leak bug in function iperf_create_pidfile (#1443)
  * doc: Fix copy-and-paste error leading to wrong error message
  * Fix crash on rcv-timeout with JSON logfile</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- update to 3.14 (bsc#1213430, CVE-2023-38403):
  * fixes a memory allocation hazard that allowed a remote user to
    crash an iperf3 process
  * see
    https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc
  * obsoletes CVE-2023-38403.patch in older dists</changelog>
  <changelog author="dmueller@suse.com" date="1695470400">- update to 3.15 (bsc#1215662, ESNET-SECADV-2023-0002):
  * Several bugs that could allow the iperf3 server to hang waiting
    for input on the control connection has been fixed
    (ESnet Software Security Advisory ESNET-SECADV-2023-0002)
  * A bug that caused garbled output with UDP tests on 32-bit hosts
    has been fixed (PR #1554, PR #1556). This bug was introduced in
    iperf-3.14.
  * A bug in counting UDP messages has been fixed</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 3.16:
  * Multiple test streams started with -P/--parallel will now be
    serviced by different threads. This allows iperf3 to take
    advantage of multiple CPU cores on modern processors, and will
    generally result in significant throughput increases
  * OpenSSL 3 is now detected at build time. If OpenSSL 3 is found,
    various older, deprecated, APIs will not be used. iperf3 will
    continue to work with OpenSSL 1.1.1. OpenSSL is used as a part
    of the iperf3 authentication functionality
  * The authorized users file used by the authentication
    functionality is now checked for accessibility much earlier
    during the program startup, as opposed to being checked near
    the start of a test (Issue #1583, PR #1585).
  * BREAKING CHANGE: iperf3 now requires pthreads and C atomic
    variables to compile and run.</changelog>
  <changelog author="dmueller@suse.com" date="1715774400">- update to 3.17.1 (bsc#1224262, CVE-2024-26306):
  * BREAKING CHANGE: iperf3's authentication features, when used
    with OpenSSL prior to 3.2.0, contain a vulnerability to a
    side-channel timing attack. To address this flaw, a change
    has been made to the padding applied to encrypted strings.
    This change is not backwards compatible with older versions of
    iperf3 (before 3.17). To restore
    the older (vulnerable) behavior, and hence
    backwards-compatibility, use the --use-pkcs1-padding flag. The
    iperf3 team thanks Hubert Kario from RedHat for reporting this
    issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
  * iperf3 no longer changes its current working directory in --daemon
    mode. This results in more predictable behavior with relative
    paths, in particular finding key and credential files for
    authentication. (PR#1672)
  * A new --json-stream option has been added to enable a streaming
    output format, consisting of a series of JSON objects (for the
    start of the test, each measurement interval, and the end of the
    test) separated by newlines (#444, #923, #1098).
  * UDP tests now work correctly between different endian hosts
  * The --fq-rate parameter now works for --reverse tests
  * The statistics reporting interval is now available in the --json
    start test object (#1663).
  * A negative time test duration is now properly flagged as an error
    (IS#1662 / PR#1666).</changelog>
</package>
<package pkgid="a45a72afbee6822a0ffcbe9a09456a340192e49c9d46017a259a5dc31220867b" name="iperf-devel" arch="s390x">
  <version epoch="0" ver="3.17.1" rel="150000.3.9.1"/>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530878400">- update to 3.6
  * A new --extra-data option can be used to fill in a user-defined
    string field that appears in JSON output.
  * A new --repeating-payload option makes iperf3 use a payload pattern
    similar to that used by iperf2, which could help in recreating
    results that might be affected by payload entropy (for example,
    compression).
  * -B now works properly with SCTP tests.
  * A compile fix for Solaris 10 was added.
  * Some minor bug fixes for JSON output.  In particular, warnings for
    debug and/or verbose modes with --json output and a fix for
    JSON output on CentOS 6</changelog>
  <changelog author="msvec@suse.com" date="1573732800">- update to 3.7
  * Support for simultaneous bidirectional tests with the --bidir flag
  * Use POSIX standard clock_gettime(3) interface for timekeeping where
    available
  * Passwords for authentication can be provided via environment
    variable
  * Specifying --repeating-payload and --reverse now works
  * Failed authentication doesn't count for --one-off
  * Several memory leaks related to authenticated use were fixed
  * The delay for tearing down the control connection for the default
    timed tests has been increased, to more gracefully handle
    high-delay paths
  * Various improvements to the libiperf APIs
  * Fixed build behavior when OpenSSL is absent
  * Portability fixes
- spec file cleanup</changelog>
  <changelog author="msvec@suse.com" date="1594468800">- update to 3.8.1
  * Minor bugfixes and enhancements
- don't apply the profiling patch any more
  (removed iperf-disable-profiling.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1600084800">- update to 3.9:
  * A --timestamps flag has been added, which prepends a timestamp to
    each output line.  An optional argument to this flag, which is a
    format specification to strftime(3), allows for custom timestamp
    formats (#909, #1028).
  * A --server-bitrate-limit flag has been added as a server-side
    command-line argument.  It allows a server to enforce a maximum
    throughput rate; client connections that specify a higher bitrate
    or exceed this bitrate during a test will be terminated.  The
    bitrate is expressed in bits per second, with an optional trailing
    slash and integer count that specifies an averaging interval over
    which to enforce the limit (#999).
  * A bug that caused increased CPU usage with the --bidir option has
    been fixed (#1011).
  * Fixed various minor memory leaks (#1023).</changelog>
  <changelog author="msvec@suse.com" date="1623067200">- update to 3.10:
  * Fix a bug where some --reverse tests didn't terminate (#982 /
    [#1054]).
  * Responsiveness of control connections is slightly improved (#1045
    / #1046 / #1063).
  * The allowable clock skew when doing authentication between client
    and server is now configurable with the new --time-skew-threshold
    (#1065 / #1070).
  * Bitrate throttling using the -b option now works when a burst size
    is specified (#1090).
  * A bug with calculating CPU utilization has been fixed (#1076 /
    [#1077]).
  * A --bind-dev option to support binding sockets to a given network
    interface has been added to make iperf3 work better with
    multi-homed machines and/or VRFs (#817 / #1089 / #1097).
  * --pidfile now works with --client mode (#1110).
  * The server is now less likely to get stuck due to network errors
    (#1101, #1125), controlled by the new --rcv-timeout option.
  * Fixed a few bugs in termination conditions for byte or
    block-limited tests (#1113, #1114, #1115).
  * Added tcp_info.snd_wnd to JSON output (#1148).
  * Some bugs with garbled JSON output have been fixed (#1086, #1118,
    [#1143] / #1146).
  * Support for setting the IPv4 don't-fragment (DF) bit has been
    added with the new --dont-fragment option (#1119).
  * A failure with not being able to read the congestion control
    algorithm under WSL1 has been fixed (#1061 / #1126).
  * Error handling and error messages now make more sense in cases
    where sockets were not successfully opened (#1129 / #1132 /
    [#1136], #1135 / #1138, #1128 / #1139).
  * Some buffer overflow hazards were fixed (#1134).
  * It is now possible to use the API to set/get the congestion
    control algorithm (#1036 / #1112).</changelog>
  <changelog author="msvec@suse.com" date="1623067201">- update to 3.10.1:
  * Fixed a problem with autoconf scripts that made builds fail in
    some environments (#1154 / #1155).
  * GNU autoconf 2.71 or newer is now required to regenerate iperf3's
    configure scripts.</changelog>
  <changelog author="msvec@suse.com" date="1646308800">- update to 3.11:
  * Update links to Discussions in documentation
  * Fix DSCP so that TOS = DSCP * 4 (#1162)
  * Fix --bind-dev for TCP streams (#1153)
  * Fix interface specification so doesn't overlap with IPv6 link-local addresses for -c and -B (#1157, #1180)
  * Add get/set test_unit_format function declaration to iperf_api.h
  * Auto adjustment of test-end condition for file transfers (-F), if no end condition is set, it will automatically adjust it to file size in bytes
  * Exit if idle time expires waiting for a connection in one-off mode (#1187, #1197)
  * Support zerocopy by reverse mode (#1204)
  * Update help and manpage text for #1157, support bind device
  * Consistently print target_bandwidth in JSON start section (#1177)
  * Test bitrate added to JSON output (#1168)
  * Remove fsync call after every write to receiving --file (#1176, #1159)
  * Update documentation for -w (#1175)
  * Fix for #952, different JSON object names for bidir reverse channel</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 3.12:
  * cJSON has been updated to version 1.7.15 (#1383).
  * The --bind &lt;host&gt;%&lt;dev&gt; option syntax now works properly (#1360 /
  * A server-side file descriptor leak with the --logfile option has
    been fixed (#1369 / #1360 / #1369 / #1389 / #1393).
  * A bug that caused some large values from TCP_INFO to be misprinted
    as negative numbers has been fixed (#1372).
  * Using the -k or -n flags with --reverse no longer leak into future
    tests (#1363 / #1364).
  * There are now various debug level options available with the
  - -debug option. These can be used to adjust the amount of
    debugging output (#1327).
  * A new --snd-timeout option has been added to set a termination
    timeout for idle TCP connections (#1215 / #1282).
  * iperf3 is slightly more robust to out-of-order packets during UDP
    connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 /
  * iperf3 will now use different ports for each direction when the
  - -cport and --bdir options are set (#1249 / #1259).
  * The iperf3 server will now exit if it can't open its log file
  * Various help message and output fixes have been made (#1299 /
  * Various compiler warnings have been fixed (#1211 / #1316).
  * Operation of bootstrap.sh has been fixed and simplified (#1335 /
  * Flow label support / compatibility under Linux has been improved
  * Various minor memory leaks have been fixed (#1332 / #1333).
  * A getter/setter has been added for the bind_port parameter
    (--cport option). (#1303, #1305)
  * Various internal documentation improvements (#1265 / #1285 / #1304).</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 3.13:
  * Added missing bind_dev getter and setter.
  * a fix for A resource leak bug in function iperf_create_pidfile (#1443)
  * doc: Fix copy-and-paste error leading to wrong error message
  * Fix crash on rcv-timeout with JSON logfile</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- update to 3.14 (bsc#1213430, CVE-2023-38403):
  * fixes a memory allocation hazard that allowed a remote user to
    crash an iperf3 process
  * see
    https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc
  * obsoletes CVE-2023-38403.patch in older dists</changelog>
  <changelog author="dmueller@suse.com" date="1695470400">- update to 3.15 (bsc#1215662, ESNET-SECADV-2023-0002):
  * Several bugs that could allow the iperf3 server to hang waiting
    for input on the control connection has been fixed
    (ESnet Software Security Advisory ESNET-SECADV-2023-0002)
  * A bug that caused garbled output with UDP tests on 32-bit hosts
    has been fixed (PR #1554, PR #1556). This bug was introduced in
    iperf-3.14.
  * A bug in counting UDP messages has been fixed</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 3.16:
  * Multiple test streams started with -P/--parallel will now be
    serviced by different threads. This allows iperf3 to take
    advantage of multiple CPU cores on modern processors, and will
    generally result in significant throughput increases
  * OpenSSL 3 is now detected at build time. If OpenSSL 3 is found,
    various older, deprecated, APIs will not be used. iperf3 will
    continue to work with OpenSSL 1.1.1. OpenSSL is used as a part
    of the iperf3 authentication functionality
  * The authorized users file used by the authentication
    functionality is now checked for accessibility much earlier
    during the program startup, as opposed to being checked near
    the start of a test (Issue #1583, PR #1585).
  * BREAKING CHANGE: iperf3 now requires pthreads and C atomic
    variables to compile and run.</changelog>
  <changelog author="dmueller@suse.com" date="1715774400">- update to 3.17.1 (bsc#1224262, CVE-2024-26306):
  * BREAKING CHANGE: iperf3's authentication features, when used
    with OpenSSL prior to 3.2.0, contain a vulnerability to a
    side-channel timing attack. To address this flaw, a change
    has been made to the padding applied to encrypted strings.
    This change is not backwards compatible with older versions of
    iperf3 (before 3.17). To restore
    the older (vulnerable) behavior, and hence
    backwards-compatibility, use the --use-pkcs1-padding flag. The
    iperf3 team thanks Hubert Kario from RedHat for reporting this
    issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
  * iperf3 no longer changes its current working directory in --daemon
    mode. This results in more predictable behavior with relative
    paths, in particular finding key and credential files for
    authentication. (PR#1672)
  * A new --json-stream option has been added to enable a streaming
    output format, consisting of a series of JSON objects (for the
    start of the test, each measurement interval, and the end of the
    test) separated by newlines (#444, #923, #1098).
  * UDP tests now work correctly between different endian hosts
  * The --fq-rate parameter now works for --reverse tests
  * The statistics reporting interval is now available in the --json
    start test object (#1663).
  * A negative time test duration is now properly flagged as an error
    (IS#1662 / PR#1666).</changelog>
</package>
<package pkgid="d33be81ebcbc1497a303d66c0a1929cafdfb5086cc17f494e53f2a38d68eb3fd" name="iperf-devel" arch="x86_64">
  <version epoch="0" ver="3.17.1" rel="150000.3.9.1"/>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530878400">- update to 3.6
  * A new --extra-data option can be used to fill in a user-defined
    string field that appears in JSON output.
  * A new --repeating-payload option makes iperf3 use a payload pattern
    similar to that used by iperf2, which could help in recreating
    results that might be affected by payload entropy (for example,
    compression).
  * -B now works properly with SCTP tests.
  * A compile fix for Solaris 10 was added.
  * Some minor bug fixes for JSON output.  In particular, warnings for
    debug and/or verbose modes with --json output and a fix for
    JSON output on CentOS 6</changelog>
  <changelog author="msvec@suse.com" date="1573732800">- update to 3.7
  * Support for simultaneous bidirectional tests with the --bidir flag
  * Use POSIX standard clock_gettime(3) interface for timekeeping where
    available
  * Passwords for authentication can be provided via environment
    variable
  * Specifying --repeating-payload and --reverse now works
  * Failed authentication doesn't count for --one-off
  * Several memory leaks related to authenticated use were fixed
  * The delay for tearing down the control connection for the default
    timed tests has been increased, to more gracefully handle
    high-delay paths
  * Various improvements to the libiperf APIs
  * Fixed build behavior when OpenSSL is absent
  * Portability fixes
- spec file cleanup</changelog>
  <changelog author="msvec@suse.com" date="1594468800">- update to 3.8.1
  * Minor bugfixes and enhancements
- don't apply the profiling patch any more
  (removed iperf-disable-profiling.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1600084800">- update to 3.9:
  * A --timestamps flag has been added, which prepends a timestamp to
    each output line.  An optional argument to this flag, which is a
    format specification to strftime(3), allows for custom timestamp
    formats (#909, #1028).
  * A --server-bitrate-limit flag has been added as a server-side
    command-line argument.  It allows a server to enforce a maximum
    throughput rate; client connections that specify a higher bitrate
    or exceed this bitrate during a test will be terminated.  The
    bitrate is expressed in bits per second, with an optional trailing
    slash and integer count that specifies an averaging interval over
    which to enforce the limit (#999).
  * A bug that caused increased CPU usage with the --bidir option has
    been fixed (#1011).
  * Fixed various minor memory leaks (#1023).</changelog>
  <changelog author="msvec@suse.com" date="1623067200">- update to 3.10:
  * Fix a bug where some --reverse tests didn't terminate (#982 /
    [#1054]).
  * Responsiveness of control connections is slightly improved (#1045
    / #1046 / #1063).
  * The allowable clock skew when doing authentication between client
    and server is now configurable with the new --time-skew-threshold
    (#1065 / #1070).
  * Bitrate throttling using the -b option now works when a burst size
    is specified (#1090).
  * A bug with calculating CPU utilization has been fixed (#1076 /
    [#1077]).
  * A --bind-dev option to support binding sockets to a given network
    interface has been added to make iperf3 work better with
    multi-homed machines and/or VRFs (#817 / #1089 / #1097).
  * --pidfile now works with --client mode (#1110).
  * The server is now less likely to get stuck due to network errors
    (#1101, #1125), controlled by the new --rcv-timeout option.
  * Fixed a few bugs in termination conditions for byte or
    block-limited tests (#1113, #1114, #1115).
  * Added tcp_info.snd_wnd to JSON output (#1148).
  * Some bugs with garbled JSON output have been fixed (#1086, #1118,
    [#1143] / #1146).
  * Support for setting the IPv4 don't-fragment (DF) bit has been
    added with the new --dont-fragment option (#1119).
  * A failure with not being able to read the congestion control
    algorithm under WSL1 has been fixed (#1061 / #1126).
  * Error handling and error messages now make more sense in cases
    where sockets were not successfully opened (#1129 / #1132 /
    [#1136], #1135 / #1138, #1128 / #1139).
  * Some buffer overflow hazards were fixed (#1134).
  * It is now possible to use the API to set/get the congestion
    control algorithm (#1036 / #1112).</changelog>
  <changelog author="msvec@suse.com" date="1623067201">- update to 3.10.1:
  * Fixed a problem with autoconf scripts that made builds fail in
    some environments (#1154 / #1155).
  * GNU autoconf 2.71 or newer is now required to regenerate iperf3's
    configure scripts.</changelog>
  <changelog author="msvec@suse.com" date="1646308800">- update to 3.11:
  * Update links to Discussions in documentation
  * Fix DSCP so that TOS = DSCP * 4 (#1162)
  * Fix --bind-dev for TCP streams (#1153)
  * Fix interface specification so doesn't overlap with IPv6 link-local addresses for -c and -B (#1157, #1180)
  * Add get/set test_unit_format function declaration to iperf_api.h
  * Auto adjustment of test-end condition for file transfers (-F), if no end condition is set, it will automatically adjust it to file size in bytes
  * Exit if idle time expires waiting for a connection in one-off mode (#1187, #1197)
  * Support zerocopy by reverse mode (#1204)
  * Update help and manpage text for #1157, support bind device
  * Consistently print target_bandwidth in JSON start section (#1177)
  * Test bitrate added to JSON output (#1168)
  * Remove fsync call after every write to receiving --file (#1176, #1159)
  * Update documentation for -w (#1175)
  * Fix for #952, different JSON object names for bidir reverse channel</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 3.12:
  * cJSON has been updated to version 1.7.15 (#1383).
  * The --bind &lt;host&gt;%&lt;dev&gt; option syntax now works properly (#1360 /
  * A server-side file descriptor leak with the --logfile option has
    been fixed (#1369 / #1360 / #1369 / #1389 / #1393).
  * A bug that caused some large values from TCP_INFO to be misprinted
    as negative numbers has been fixed (#1372).
  * Using the -k or -n flags with --reverse no longer leak into future
    tests (#1363 / #1364).
  * There are now various debug level options available with the
  - -debug option. These can be used to adjust the amount of
    debugging output (#1327).
  * A new --snd-timeout option has been added to set a termination
    timeout for idle TCP connections (#1215 / #1282).
  * iperf3 is slightly more robust to out-of-order packets during UDP
    connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 /
  * iperf3 will now use different ports for each direction when the
  - -cport and --bdir options are set (#1249 / #1259).
  * The iperf3 server will now exit if it can't open its log file
  * Various help message and output fixes have been made (#1299 /
  * Various compiler warnings have been fixed (#1211 / #1316).
  * Operation of bootstrap.sh has been fixed and simplified (#1335 /
  * Flow label support / compatibility under Linux has been improved
  * Various minor memory leaks have been fixed (#1332 / #1333).
  * A getter/setter has been added for the bind_port parameter
    (--cport option). (#1303, #1305)
  * Various internal documentation improvements (#1265 / #1285 / #1304).</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 3.13:
  * Added missing bind_dev getter and setter.
  * a fix for A resource leak bug in function iperf_create_pidfile (#1443)
  * doc: Fix copy-and-paste error leading to wrong error message
  * Fix crash on rcv-timeout with JSON logfile</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- update to 3.14 (bsc#1213430, CVE-2023-38403):
  * fixes a memory allocation hazard that allowed a remote user to
    crash an iperf3 process
  * see
    https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc
  * obsoletes CVE-2023-38403.patch in older dists</changelog>
  <changelog author="dmueller@suse.com" date="1695470400">- update to 3.15 (bsc#1215662, ESNET-SECADV-2023-0002):
  * Several bugs that could allow the iperf3 server to hang waiting
    for input on the control connection has been fixed
    (ESnet Software Security Advisory ESNET-SECADV-2023-0002)
  * A bug that caused garbled output with UDP tests on 32-bit hosts
    has been fixed (PR #1554, PR #1556). This bug was introduced in
    iperf-3.14.
  * A bug in counting UDP messages has been fixed</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 3.16:
  * Multiple test streams started with -P/--parallel will now be
    serviced by different threads. This allows iperf3 to take
    advantage of multiple CPU cores on modern processors, and will
    generally result in significant throughput increases
  * OpenSSL 3 is now detected at build time. If OpenSSL 3 is found,
    various older, deprecated, APIs will not be used. iperf3 will
    continue to work with OpenSSL 1.1.1. OpenSSL is used as a part
    of the iperf3 authentication functionality
  * The authorized users file used by the authentication
    functionality is now checked for accessibility much earlier
    during the program startup, as opposed to being checked near
    the start of a test (Issue #1583, PR #1585).
  * BREAKING CHANGE: iperf3 now requires pthreads and C atomic
    variables to compile and run.</changelog>
  <changelog author="dmueller@suse.com" date="1715774400">- update to 3.17.1 (bsc#1224262, CVE-2024-26306):
  * BREAKING CHANGE: iperf3's authentication features, when used
    with OpenSSL prior to 3.2.0, contain a vulnerability to a
    side-channel timing attack. To address this flaw, a change
    has been made to the padding applied to encrypted strings.
    This change is not backwards compatible with older versions of
    iperf3 (before 3.17). To restore
    the older (vulnerable) behavior, and hence
    backwards-compatibility, use the --use-pkcs1-padding flag. The
    iperf3 team thanks Hubert Kario from RedHat for reporting this
    issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
  * iperf3 no longer changes its current working directory in --daemon
    mode. This results in more predictable behavior with relative
    paths, in particular finding key and credential files for
    authentication. (PR#1672)
  * A new --json-stream option has been added to enable a streaming
    output format, consisting of a series of JSON objects (for the
    start of the test, each measurement interval, and the end of the
    test) separated by newlines (#444, #923, #1098).
  * UDP tests now work correctly between different endian hosts
  * The --fq-rate parameter now works for --reverse tests
  * The statistics reporting interval is now available in the --json
    start test object (#1663).
  * A negative time test duration is now properly flagged as an error
    (IS#1662 / PR#1666).</changelog>
</package>
<package pkgid="ad60679edecf4da498fdec5af0496c1e32d3c91b8e9857c6ea7fc08eb7d1e6ff" name="iproute2" arch="aarch64">
  <version epoch="0" ver="6.4" rel="150600.7.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1523016000">- list of patches packed into patches.tar.xz on its creation (this
  is a fake changelog entry added to silence factory-auto bot):
  adjust-installation-directories-for-openSUSE-SLE.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  add-explicit-typecast-to-avoid-gcc-warning.patch
  xfrm-support-displaying-transformations-used-for-Mob.patch
  man-fix-documentation-references-in-manual-pages.patch
  split-link-and-compile-steps-for-binaries.patch
  examples-fix-bashisms-in-example-script.patch
  utils-Move-BIT-macro-to-common-header.patch
  rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  rdma-Add-dev-object.patch
  rdma-Add-link-object.patch
  rdma-Add-json-and-pretty-outputs.patch
  rdma-Implement-json-output-for-dev-object.patch
  rdma-Add-json-output-to-link-object.patch
  rdma-Add-initial-manual-for-the-tool.patch
  rdma-fix-duplicate-initialization-in-port_names.patch
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch
  utils-return-default-family-when-rtm_family-is-not-R.patch
  Really-fix-get_addr-and-get_prefix-error-messages.patch
  iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  ss-enclose-IPv6-address-in-brackets.patch
  lib-fix-extended-ack-with-and-without-libmnl.patch
  lib-need-to-pass-LIBMNL-flag.patch
  change-how-Config-is-used-in-Makefile-s.patch
  tc-ip-more-Makefile-updates-for-LIBMNL.patch
  lib-Dump-ext-ack-string-by-default.patch
  bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  libnetlink-Fix-extack-attribute-parsing.patch
  ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  ss-Fix-potential-memleak-in-unix_stats_print.patch
  iproute-Fix-for-missing-Oifs-display.patch
  ipmaddr-Avoid-accessing-uninitialized-data.patch
  ss-Fix-for-added-diag-support-check.patch
  link_gre6-Fix-for-changing-tclass-flowlabel.patch
  tc-actions-store-and-dump-correct-length-of-user-coo.patch
  ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  ip-maddr-fix-filtering-by-device.patch
  man-add-additional-explainations-for-ss.patch
  tc-move-action-cookie-print-out-of-the-stats-if.patch
  tc-remove-action-cookie-len-from-printout.patch
  link_gre6-Detect-invalid-encaplimit-values.patch
  man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  tc-bash-completion-add-missing-classid-keyword.patch
  gre-ip6tnl-tunnel-Fix-noencap-support.patch
  Restore-no-print-directory-option-for-silent-builds.patch
  iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467200">- normalize patches: remove git specific artefacts to reduce noise
  on future refreshes and updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467201">- fix misplaced patch tags:
  patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  patches/rdma-Ignore-unknown-netlink-attributes.patch
  patches/tc-fix-command-tc-actions-del-hang-issue.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467202">- spec file cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1547640000">- refresh all patches</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
</package>
<package pkgid="f9e39bb7f05bac50408b095cb8e399bbe1a0239050b69b8322595efa4024edaa" name="iproute2" arch="ppc64le">
  <version epoch="0" ver="6.4" rel="150600.7.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1523016000">- list of patches packed into patches.tar.xz on its creation (this
  is a fake changelog entry added to silence factory-auto bot):
  adjust-installation-directories-for-openSUSE-SLE.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  add-explicit-typecast-to-avoid-gcc-warning.patch
  xfrm-support-displaying-transformations-used-for-Mob.patch
  man-fix-documentation-references-in-manual-pages.patch
  split-link-and-compile-steps-for-binaries.patch
  examples-fix-bashisms-in-example-script.patch
  utils-Move-BIT-macro-to-common-header.patch
  rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  rdma-Add-dev-object.patch
  rdma-Add-link-object.patch
  rdma-Add-json-and-pretty-outputs.patch
  rdma-Implement-json-output-for-dev-object.patch
  rdma-Add-json-output-to-link-object.patch
  rdma-Add-initial-manual-for-the-tool.patch
  rdma-fix-duplicate-initialization-in-port_names.patch
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch
  utils-return-default-family-when-rtm_family-is-not-R.patch
  Really-fix-get_addr-and-get_prefix-error-messages.patch
  iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  ss-enclose-IPv6-address-in-brackets.patch
  lib-fix-extended-ack-with-and-without-libmnl.patch
  lib-need-to-pass-LIBMNL-flag.patch
  change-how-Config-is-used-in-Makefile-s.patch
  tc-ip-more-Makefile-updates-for-LIBMNL.patch
  lib-Dump-ext-ack-string-by-default.patch
  bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  libnetlink-Fix-extack-attribute-parsing.patch
  ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  ss-Fix-potential-memleak-in-unix_stats_print.patch
  iproute-Fix-for-missing-Oifs-display.patch
  ipmaddr-Avoid-accessing-uninitialized-data.patch
  ss-Fix-for-added-diag-support-check.patch
  link_gre6-Fix-for-changing-tclass-flowlabel.patch
  tc-actions-store-and-dump-correct-length-of-user-coo.patch
  ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  ip-maddr-fix-filtering-by-device.patch
  man-add-additional-explainations-for-ss.patch
  tc-move-action-cookie-print-out-of-the-stats-if.patch
  tc-remove-action-cookie-len-from-printout.patch
  link_gre6-Detect-invalid-encaplimit-values.patch
  man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  tc-bash-completion-add-missing-classid-keyword.patch
  gre-ip6tnl-tunnel-Fix-noencap-support.patch
  Restore-no-print-directory-option-for-silent-builds.patch
  iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467200">- normalize patches: remove git specific artefacts to reduce noise
  on future refreshes and updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467201">- fix misplaced patch tags:
  patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  patches/rdma-Ignore-unknown-netlink-attributes.patch
  patches/tc-fix-command-tc-actions-del-hang-issue.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467202">- spec file cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1547640000">- refresh all patches</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
</package>
<package pkgid="69d2a72e9c9b5bfe04ccbd5efdeefe799f8cdf57af975676a3cc235ff3190de8" name="iproute2" arch="s390x">
  <version epoch="0" ver="6.4" rel="150600.7.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1523016000">- list of patches packed into patches.tar.xz on its creation (this
  is a fake changelog entry added to silence factory-auto bot):
  adjust-installation-directories-for-openSUSE-SLE.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  add-explicit-typecast-to-avoid-gcc-warning.patch
  xfrm-support-displaying-transformations-used-for-Mob.patch
  man-fix-documentation-references-in-manual-pages.patch
  split-link-and-compile-steps-for-binaries.patch
  examples-fix-bashisms-in-example-script.patch
  utils-Move-BIT-macro-to-common-header.patch
  rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  rdma-Add-dev-object.patch
  rdma-Add-link-object.patch
  rdma-Add-json-and-pretty-outputs.patch
  rdma-Implement-json-output-for-dev-object.patch
  rdma-Add-json-output-to-link-object.patch
  rdma-Add-initial-manual-for-the-tool.patch
  rdma-fix-duplicate-initialization-in-port_names.patch
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch
  utils-return-default-family-when-rtm_family-is-not-R.patch
  Really-fix-get_addr-and-get_prefix-error-messages.patch
  iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  ss-enclose-IPv6-address-in-brackets.patch
  lib-fix-extended-ack-with-and-without-libmnl.patch
  lib-need-to-pass-LIBMNL-flag.patch
  change-how-Config-is-used-in-Makefile-s.patch
  tc-ip-more-Makefile-updates-for-LIBMNL.patch
  lib-Dump-ext-ack-string-by-default.patch
  bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  libnetlink-Fix-extack-attribute-parsing.patch
  ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  ss-Fix-potential-memleak-in-unix_stats_print.patch
  iproute-Fix-for-missing-Oifs-display.patch
  ipmaddr-Avoid-accessing-uninitialized-data.patch
  ss-Fix-for-added-diag-support-check.patch
  link_gre6-Fix-for-changing-tclass-flowlabel.patch
  tc-actions-store-and-dump-correct-length-of-user-coo.patch
  ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  ip-maddr-fix-filtering-by-device.patch
  man-add-additional-explainations-for-ss.patch
  tc-move-action-cookie-print-out-of-the-stats-if.patch
  tc-remove-action-cookie-len-from-printout.patch
  link_gre6-Detect-invalid-encaplimit-values.patch
  man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  tc-bash-completion-add-missing-classid-keyword.patch
  gre-ip6tnl-tunnel-Fix-noencap-support.patch
  Restore-no-print-directory-option-for-silent-builds.patch
  iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467200">- normalize patches: remove git specific artefacts to reduce noise
  on future refreshes and updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467201">- fix misplaced patch tags:
  patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  patches/rdma-Ignore-unknown-netlink-attributes.patch
  patches/tc-fix-command-tc-actions-del-hang-issue.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467202">- spec file cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1547640000">- refresh all patches</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
</package>
<package pkgid="236e8caa22e7587fea2665b266447087dd93bb0e759c982a9b8d162099a6cc9a" name="iproute2" arch="src">
  <version epoch="0" ver="6.4" rel="150600.7.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1523016000">- list of patches packed into patches.tar.xz on its creation (this
  is a fake changelog entry added to silence factory-auto bot):
  adjust-installation-directories-for-openSUSE-SLE.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  add-explicit-typecast-to-avoid-gcc-warning.patch
  xfrm-support-displaying-transformations-used-for-Mob.patch
  man-fix-documentation-references-in-manual-pages.patch
  split-link-and-compile-steps-for-binaries.patch
  examples-fix-bashisms-in-example-script.patch
  utils-Move-BIT-macro-to-common-header.patch
  rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  rdma-Add-dev-object.patch
  rdma-Add-link-object.patch
  rdma-Add-json-and-pretty-outputs.patch
  rdma-Implement-json-output-for-dev-object.patch
  rdma-Add-json-output-to-link-object.patch
  rdma-Add-initial-manual-for-the-tool.patch
  rdma-fix-duplicate-initialization-in-port_names.patch
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch
  utils-return-default-family-when-rtm_family-is-not-R.patch
  Really-fix-get_addr-and-get_prefix-error-messages.patch
  iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  ss-enclose-IPv6-address-in-brackets.patch
  lib-fix-extended-ack-with-and-without-libmnl.patch
  lib-need-to-pass-LIBMNL-flag.patch
  change-how-Config-is-used-in-Makefile-s.patch
  tc-ip-more-Makefile-updates-for-LIBMNL.patch
  lib-Dump-ext-ack-string-by-default.patch
  bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  libnetlink-Fix-extack-attribute-parsing.patch
  ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  ss-Fix-potential-memleak-in-unix_stats_print.patch
  iproute-Fix-for-missing-Oifs-display.patch
  ipmaddr-Avoid-accessing-uninitialized-data.patch
  ss-Fix-for-added-diag-support-check.patch
  link_gre6-Fix-for-changing-tclass-flowlabel.patch
  tc-actions-store-and-dump-correct-length-of-user-coo.patch
  ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  ip-maddr-fix-filtering-by-device.patch
  man-add-additional-explainations-for-ss.patch
  tc-move-action-cookie-print-out-of-the-stats-if.patch
  tc-remove-action-cookie-len-from-printout.patch
  link_gre6-Detect-invalid-encaplimit-values.patch
  man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  tc-bash-completion-add-missing-classid-keyword.patch
  gre-ip6tnl-tunnel-Fix-noencap-support.patch
  Restore-no-print-directory-option-for-silent-builds.patch
  iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467200">- normalize patches: remove git specific artefacts to reduce noise
  on future refreshes and updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467201">- fix misplaced patch tags:
  patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  patches/rdma-Ignore-unknown-netlink-attributes.patch
  patches/tc-fix-command-tc-actions-del-hang-issue.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467202">- spec file cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1547640000">- refresh all patches</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
</package>
<package pkgid="3d5ae036513ad4f66020fc0232cbd6f21a7d644a5e1d2a3a50f8890135258828" name="iproute2" arch="x86_64">
  <version epoch="0" ver="6.4" rel="150600.7.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1523016000">- list of patches packed into patches.tar.xz on its creation (this
  is a fake changelog entry added to silence factory-auto bot):
  adjust-installation-directories-for-openSUSE-SLE.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  add-explicit-typecast-to-avoid-gcc-warning.patch
  xfrm-support-displaying-transformations-used-for-Mob.patch
  man-fix-documentation-references-in-manual-pages.patch
  split-link-and-compile-steps-for-binaries.patch
  examples-fix-bashisms-in-example-script.patch
  utils-Move-BIT-macro-to-common-header.patch
  rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  rdma-Add-dev-object.patch
  rdma-Add-link-object.patch
  rdma-Add-json-and-pretty-outputs.patch
  rdma-Implement-json-output-for-dev-object.patch
  rdma-Add-json-output-to-link-object.patch
  rdma-Add-initial-manual-for-the-tool.patch
  rdma-fix-duplicate-initialization-in-port_names.patch
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch
  utils-return-default-family-when-rtm_family-is-not-R.patch
  Really-fix-get_addr-and-get_prefix-error-messages.patch
  iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  ss-enclose-IPv6-address-in-brackets.patch
  lib-fix-extended-ack-with-and-without-libmnl.patch
  lib-need-to-pass-LIBMNL-flag.patch
  change-how-Config-is-used-in-Makefile-s.patch
  tc-ip-more-Makefile-updates-for-LIBMNL.patch
  lib-Dump-ext-ack-string-by-default.patch
  bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  libnetlink-Fix-extack-attribute-parsing.patch
  ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  ss-Fix-potential-memleak-in-unix_stats_print.patch
  iproute-Fix-for-missing-Oifs-display.patch
  ipmaddr-Avoid-accessing-uninitialized-data.patch
  ss-Fix-for-added-diag-support-check.patch
  link_gre6-Fix-for-changing-tclass-flowlabel.patch
  tc-actions-store-and-dump-correct-length-of-user-coo.patch
  ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  ip-maddr-fix-filtering-by-device.patch
  man-add-additional-explainations-for-ss.patch
  tc-move-action-cookie-print-out-of-the-stats-if.patch
  tc-remove-action-cookie-len-from-printout.patch
  link_gre6-Detect-invalid-encaplimit-values.patch
  man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  tc-bash-completion-add-missing-classid-keyword.patch
  gre-ip6tnl-tunnel-Fix-noencap-support.patch
  Restore-no-print-directory-option-for-silent-builds.patch
  iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467200">- normalize patches: remove git specific artefacts to reduce noise
  on future refreshes and updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467201">- fix misplaced patch tags:
  patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  patches/rdma-Ignore-unknown-netlink-attributes.patch
  patches/tc-fix-command-tc-actions-del-hang-issue.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467202">- spec file cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1547640000">- refresh all patches</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
</package>
<package pkgid="34fd24c53e4e9eb05dc17205f2d3e1607ce4f57ba4952860ed3e27519bda46a3" name="iproute2-arpd" arch="aarch64">
  <version epoch="0" ver="6.4" rel="150600.7.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1523016000">- list of patches packed into patches.tar.xz on its creation (this
  is a fake changelog entry added to silence factory-auto bot):
  adjust-installation-directories-for-openSUSE-SLE.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  add-explicit-typecast-to-avoid-gcc-warning.patch
  xfrm-support-displaying-transformations-used-for-Mob.patch
  man-fix-documentation-references-in-manual-pages.patch
  split-link-and-compile-steps-for-binaries.patch
  examples-fix-bashisms-in-example-script.patch
  utils-Move-BIT-macro-to-common-header.patch
  rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  rdma-Add-dev-object.patch
  rdma-Add-link-object.patch
  rdma-Add-json-and-pretty-outputs.patch
  rdma-Implement-json-output-for-dev-object.patch
  rdma-Add-json-output-to-link-object.patch
  rdma-Add-initial-manual-for-the-tool.patch
  rdma-fix-duplicate-initialization-in-port_names.patch
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch
  utils-return-default-family-when-rtm_family-is-not-R.patch
  Really-fix-get_addr-and-get_prefix-error-messages.patch
  iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  ss-enclose-IPv6-address-in-brackets.patch
  lib-fix-extended-ack-with-and-without-libmnl.patch
  lib-need-to-pass-LIBMNL-flag.patch
  change-how-Config-is-used-in-Makefile-s.patch
  tc-ip-more-Makefile-updates-for-LIBMNL.patch
  lib-Dump-ext-ack-string-by-default.patch
  bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  libnetlink-Fix-extack-attribute-parsing.patch
  ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  ss-Fix-potential-memleak-in-unix_stats_print.patch
  iproute-Fix-for-missing-Oifs-display.patch
  ipmaddr-Avoid-accessing-uninitialized-data.patch
  ss-Fix-for-added-diag-support-check.patch
  link_gre6-Fix-for-changing-tclass-flowlabel.patch
  tc-actions-store-and-dump-correct-length-of-user-coo.patch
  ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  ip-maddr-fix-filtering-by-device.patch
  man-add-additional-explainations-for-ss.patch
  tc-move-action-cookie-print-out-of-the-stats-if.patch
  tc-remove-action-cookie-len-from-printout.patch
  link_gre6-Detect-invalid-encaplimit-values.patch
  man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  tc-bash-completion-add-missing-classid-keyword.patch
  gre-ip6tnl-tunnel-Fix-noencap-support.patch
  Restore-no-print-directory-option-for-silent-builds.patch
  iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467200">- normalize patches: remove git specific artefacts to reduce noise
  on future refreshes and updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467201">- fix misplaced patch tags:
  patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  patches/rdma-Ignore-unknown-netlink-attributes.patch
  patches/tc-fix-command-tc-actions-del-hang-issue.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467202">- spec file cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1547640000">- refresh all patches</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
</package>
<package pkgid="b409fda5d39c6f5096e07e7208e50765ef518086b0925a1e5c65ef03ee702996" name="iproute2-arpd" arch="ppc64le">
  <version epoch="0" ver="6.4" rel="150600.7.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1523016000">- list of patches packed into patches.tar.xz on its creation (this
  is a fake changelog entry added to silence factory-auto bot):
  adjust-installation-directories-for-openSUSE-SLE.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  add-explicit-typecast-to-avoid-gcc-warning.patch
  xfrm-support-displaying-transformations-used-for-Mob.patch
  man-fix-documentation-references-in-manual-pages.patch
  split-link-and-compile-steps-for-binaries.patch
  examples-fix-bashisms-in-example-script.patch
  utils-Move-BIT-macro-to-common-header.patch
  rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  rdma-Add-dev-object.patch
  rdma-Add-link-object.patch
  rdma-Add-json-and-pretty-outputs.patch
  rdma-Implement-json-output-for-dev-object.patch
  rdma-Add-json-output-to-link-object.patch
  rdma-Add-initial-manual-for-the-tool.patch
  rdma-fix-duplicate-initialization-in-port_names.patch
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch
  utils-return-default-family-when-rtm_family-is-not-R.patch
  Really-fix-get_addr-and-get_prefix-error-messages.patch
  iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  ss-enclose-IPv6-address-in-brackets.patch
  lib-fix-extended-ack-with-and-without-libmnl.patch
  lib-need-to-pass-LIBMNL-flag.patch
  change-how-Config-is-used-in-Makefile-s.patch
  tc-ip-more-Makefile-updates-for-LIBMNL.patch
  lib-Dump-ext-ack-string-by-default.patch
  bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  libnetlink-Fix-extack-attribute-parsing.patch
  ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  ss-Fix-potential-memleak-in-unix_stats_print.patch
  iproute-Fix-for-missing-Oifs-display.patch
  ipmaddr-Avoid-accessing-uninitialized-data.patch
  ss-Fix-for-added-diag-support-check.patch
  link_gre6-Fix-for-changing-tclass-flowlabel.patch
  tc-actions-store-and-dump-correct-length-of-user-coo.patch
  ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  ip-maddr-fix-filtering-by-device.patch
  man-add-additional-explainations-for-ss.patch
  tc-move-action-cookie-print-out-of-the-stats-if.patch
  tc-remove-action-cookie-len-from-printout.patch
  link_gre6-Detect-invalid-encaplimit-values.patch
  man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  tc-bash-completion-add-missing-classid-keyword.patch
  gre-ip6tnl-tunnel-Fix-noencap-support.patch
  Restore-no-print-directory-option-for-silent-builds.patch
  iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467200">- normalize patches: remove git specific artefacts to reduce noise
  on future refreshes and updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467201">- fix misplaced patch tags:
  patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  patches/rdma-Ignore-unknown-netlink-attributes.patch
  patches/tc-fix-command-tc-actions-del-hang-issue.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467202">- spec file cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1547640000">- refresh all patches</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
</package>
<package pkgid="c66319b81f7590974c7f3af5d76bfa3cf17679a96e07cb64f33dd1022fd9a0c5" name="iproute2-arpd" arch="s390x">
  <version epoch="0" ver="6.4" rel="150600.7.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1523016000">- list of patches packed into patches.tar.xz on its creation (this
  is a fake changelog entry added to silence factory-auto bot):
  adjust-installation-directories-for-openSUSE-SLE.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  add-explicit-typecast-to-avoid-gcc-warning.patch
  xfrm-support-displaying-transformations-used-for-Mob.patch
  man-fix-documentation-references-in-manual-pages.patch
  split-link-and-compile-steps-for-binaries.patch
  examples-fix-bashisms-in-example-script.patch
  utils-Move-BIT-macro-to-common-header.patch
  rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  rdma-Add-dev-object.patch
  rdma-Add-link-object.patch
  rdma-Add-json-and-pretty-outputs.patch
  rdma-Implement-json-output-for-dev-object.patch
  rdma-Add-json-output-to-link-object.patch
  rdma-Add-initial-manual-for-the-tool.patch
  rdma-fix-duplicate-initialization-in-port_names.patch
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch
  utils-return-default-family-when-rtm_family-is-not-R.patch
  Really-fix-get_addr-and-get_prefix-error-messages.patch
  iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  ss-enclose-IPv6-address-in-brackets.patch
  lib-fix-extended-ack-with-and-without-libmnl.patch
  lib-need-to-pass-LIBMNL-flag.patch
  change-how-Config-is-used-in-Makefile-s.patch
  tc-ip-more-Makefile-updates-for-LIBMNL.patch
  lib-Dump-ext-ack-string-by-default.patch
  bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  libnetlink-Fix-extack-attribute-parsing.patch
  ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  ss-Fix-potential-memleak-in-unix_stats_print.patch
  iproute-Fix-for-missing-Oifs-display.patch
  ipmaddr-Avoid-accessing-uninitialized-data.patch
  ss-Fix-for-added-diag-support-check.patch
  link_gre6-Fix-for-changing-tclass-flowlabel.patch
  tc-actions-store-and-dump-correct-length-of-user-coo.patch
  ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  ip-maddr-fix-filtering-by-device.patch
  man-add-additional-explainations-for-ss.patch
  tc-move-action-cookie-print-out-of-the-stats-if.patch
  tc-remove-action-cookie-len-from-printout.patch
  link_gre6-Detect-invalid-encaplimit-values.patch
  man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  tc-bash-completion-add-missing-classid-keyword.patch
  gre-ip6tnl-tunnel-Fix-noencap-support.patch
  Restore-no-print-directory-option-for-silent-builds.patch
  iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467200">- normalize patches: remove git specific artefacts to reduce noise
  on future refreshes and updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467201">- fix misplaced patch tags:
  patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  patches/rdma-Ignore-unknown-netlink-attributes.patch
  patches/tc-fix-command-tc-actions-del-hang-issue.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467202">- spec file cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1547640000">- refresh all patches</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
</package>
<package pkgid="e053e291ddd0b85a1ca9e35b57db095be22c439e9c45dd342633648037b907d6" name="iproute2-arpd" arch="x86_64">
  <version epoch="0" ver="6.4" rel="150600.7.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1523016000">- list of patches packed into patches.tar.xz on its creation (this
  is a fake changelog entry added to silence factory-auto bot):
  adjust-installation-directories-for-openSUSE-SLE.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  add-explicit-typecast-to-avoid-gcc-warning.patch
  xfrm-support-displaying-transformations-used-for-Mob.patch
  man-fix-documentation-references-in-manual-pages.patch
  split-link-and-compile-steps-for-binaries.patch
  examples-fix-bashisms-in-example-script.patch
  utils-Move-BIT-macro-to-common-header.patch
  rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  rdma-Add-dev-object.patch
  rdma-Add-link-object.patch
  rdma-Add-json-and-pretty-outputs.patch
  rdma-Implement-json-output-for-dev-object.patch
  rdma-Add-json-output-to-link-object.patch
  rdma-Add-initial-manual-for-the-tool.patch
  rdma-fix-duplicate-initialization-in-port_names.patch
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch
  utils-return-default-family-when-rtm_family-is-not-R.patch
  Really-fix-get_addr-and-get_prefix-error-messages.patch
  iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  ss-enclose-IPv6-address-in-brackets.patch
  lib-fix-extended-ack-with-and-without-libmnl.patch
  lib-need-to-pass-LIBMNL-flag.patch
  change-how-Config-is-used-in-Makefile-s.patch
  tc-ip-more-Makefile-updates-for-LIBMNL.patch
  lib-Dump-ext-ack-string-by-default.patch
  bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  libnetlink-Fix-extack-attribute-parsing.patch
  ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  ss-Fix-potential-memleak-in-unix_stats_print.patch
  iproute-Fix-for-missing-Oifs-display.patch
  ipmaddr-Avoid-accessing-uninitialized-data.patch
  ss-Fix-for-added-diag-support-check.patch
  link_gre6-Fix-for-changing-tclass-flowlabel.patch
  tc-actions-store-and-dump-correct-length-of-user-coo.patch
  ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  ip-maddr-fix-filtering-by-device.patch
  man-add-additional-explainations-for-ss.patch
  tc-move-action-cookie-print-out-of-the-stats-if.patch
  tc-remove-action-cookie-len-from-printout.patch
  link_gre6-Detect-invalid-encaplimit-values.patch
  man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  tc-bash-completion-add-missing-classid-keyword.patch
  gre-ip6tnl-tunnel-Fix-noencap-support.patch
  Restore-no-print-directory-option-for-silent-builds.patch
  iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467200">- normalize patches: remove git specific artefacts to reduce noise
  on future refreshes and updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467201">- fix misplaced patch tags:
  patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  patches/rdma-Ignore-unknown-netlink-attributes.patch
  patches/tc-fix-command-tc-actions-del-hang-issue.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467202">- spec file cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1547640000">- refresh all patches</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
</package>
<package pkgid="f0ba2e2455058663a521e8b58ecd07a5d982ded2e4be19aac1ffd31cc1cde7d3" name="iproute2-bash-completion" arch="aarch64">
  <version epoch="0" ver="6.4" rel="150600.7.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1523016000">- list of patches packed into patches.tar.xz on its creation (this
  is a fake changelog entry added to silence factory-auto bot):
  adjust-installation-directories-for-openSUSE-SLE.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  add-explicit-typecast-to-avoid-gcc-warning.patch
  xfrm-support-displaying-transformations-used-for-Mob.patch
  man-fix-documentation-references-in-manual-pages.patch
  split-link-and-compile-steps-for-binaries.patch
  examples-fix-bashisms-in-example-script.patch
  utils-Move-BIT-macro-to-common-header.patch
  rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  rdma-Add-dev-object.patch
  rdma-Add-link-object.patch
  rdma-Add-json-and-pretty-outputs.patch
  rdma-Implement-json-output-for-dev-object.patch
  rdma-Add-json-output-to-link-object.patch
  rdma-Add-initial-manual-for-the-tool.patch
  rdma-fix-duplicate-initialization-in-port_names.patch
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch
  utils-return-default-family-when-rtm_family-is-not-R.patch
  Really-fix-get_addr-and-get_prefix-error-messages.patch
  iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  ss-enclose-IPv6-address-in-brackets.patch
  lib-fix-extended-ack-with-and-without-libmnl.patch
  lib-need-to-pass-LIBMNL-flag.patch
  change-how-Config-is-used-in-Makefile-s.patch
  tc-ip-more-Makefile-updates-for-LIBMNL.patch
  lib-Dump-ext-ack-string-by-default.patch
  bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  libnetlink-Fix-extack-attribute-parsing.patch
  ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  ss-Fix-potential-memleak-in-unix_stats_print.patch
  iproute-Fix-for-missing-Oifs-display.patch
  ipmaddr-Avoid-accessing-uninitialized-data.patch
  ss-Fix-for-added-diag-support-check.patch
  link_gre6-Fix-for-changing-tclass-flowlabel.patch
  tc-actions-store-and-dump-correct-length-of-user-coo.patch
  ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  ip-maddr-fix-filtering-by-device.patch
  man-add-additional-explainations-for-ss.patch
  tc-move-action-cookie-print-out-of-the-stats-if.patch
  tc-remove-action-cookie-len-from-printout.patch
  link_gre6-Detect-invalid-encaplimit-values.patch
  man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  tc-bash-completion-add-missing-classid-keyword.patch
  gre-ip6tnl-tunnel-Fix-noencap-support.patch
  Restore-no-print-directory-option-for-silent-builds.patch
  iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467200">- normalize patches: remove git specific artefacts to reduce noise
  on future refreshes and updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467201">- fix misplaced patch tags:
  patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  patches/rdma-Ignore-unknown-netlink-attributes.patch
  patches/tc-fix-command-tc-actions-del-hang-issue.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467202">- spec file cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1547640000">- refresh all patches</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
</package>
<package pkgid="b4f875c21dda73db299753bb7be93fd399fb2f700b3f864fcac892bea1957556" name="iproute2-bash-completion" arch="ppc64le">
  <version epoch="0" ver="6.4" rel="150600.7.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1523016000">- list of patches packed into patches.tar.xz on its creation (this
  is a fake changelog entry added to silence factory-auto bot):
  adjust-installation-directories-for-openSUSE-SLE.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  add-explicit-typecast-to-avoid-gcc-warning.patch
  xfrm-support-displaying-transformations-used-for-Mob.patch
  man-fix-documentation-references-in-manual-pages.patch
  split-link-and-compile-steps-for-binaries.patch
  examples-fix-bashisms-in-example-script.patch
  utils-Move-BIT-macro-to-common-header.patch
  rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  rdma-Add-dev-object.patch
  rdma-Add-link-object.patch
  rdma-Add-json-and-pretty-outputs.patch
  rdma-Implement-json-output-for-dev-object.patch
  rdma-Add-json-output-to-link-object.patch
  rdma-Add-initial-manual-for-the-tool.patch
  rdma-fix-duplicate-initialization-in-port_names.patch
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch
  utils-return-default-family-when-rtm_family-is-not-R.patch
  Really-fix-get_addr-and-get_prefix-error-messages.patch
  iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  ss-enclose-IPv6-address-in-brackets.patch
  lib-fix-extended-ack-with-and-without-libmnl.patch
  lib-need-to-pass-LIBMNL-flag.patch
  change-how-Config-is-used-in-Makefile-s.patch
  tc-ip-more-Makefile-updates-for-LIBMNL.patch
  lib-Dump-ext-ack-string-by-default.patch
  bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  libnetlink-Fix-extack-attribute-parsing.patch
  ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  ss-Fix-potential-memleak-in-unix_stats_print.patch
  iproute-Fix-for-missing-Oifs-display.patch
  ipmaddr-Avoid-accessing-uninitialized-data.patch
  ss-Fix-for-added-diag-support-check.patch
  link_gre6-Fix-for-changing-tclass-flowlabel.patch
  tc-actions-store-and-dump-correct-length-of-user-coo.patch
  ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  ip-maddr-fix-filtering-by-device.patch
  man-add-additional-explainations-for-ss.patch
  tc-move-action-cookie-print-out-of-the-stats-if.patch
  tc-remove-action-cookie-len-from-printout.patch
  link_gre6-Detect-invalid-encaplimit-values.patch
  man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  tc-bash-completion-add-missing-classid-keyword.patch
  gre-ip6tnl-tunnel-Fix-noencap-support.patch
  Restore-no-print-directory-option-for-silent-builds.patch
  iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467200">- normalize patches: remove git specific artefacts to reduce noise
  on future refreshes and updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467201">- fix misplaced patch tags:
  patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  patches/rdma-Ignore-unknown-netlink-attributes.patch
  patches/tc-fix-command-tc-actions-del-hang-issue.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467202">- spec file cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1547640000">- refresh all patches</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
</package>
<package pkgid="66ed8219dae05799f28e6b2d0617a233d0aed9dc1e11deca03539e3fed97bc19" name="iproute2-bash-completion" arch="s390x">
  <version epoch="0" ver="6.4" rel="150600.7.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1523016000">- list of patches packed into patches.tar.xz on its creation (this
  is a fake changelog entry added to silence factory-auto bot):
  adjust-installation-directories-for-openSUSE-SLE.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  add-explicit-typecast-to-avoid-gcc-warning.patch
  xfrm-support-displaying-transformations-used-for-Mob.patch
  man-fix-documentation-references-in-manual-pages.patch
  split-link-and-compile-steps-for-binaries.patch
  examples-fix-bashisms-in-example-script.patch
  utils-Move-BIT-macro-to-common-header.patch
  rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  rdma-Add-dev-object.patch
  rdma-Add-link-object.patch
  rdma-Add-json-and-pretty-outputs.patch
  rdma-Implement-json-output-for-dev-object.patch
  rdma-Add-json-output-to-link-object.patch
  rdma-Add-initial-manual-for-the-tool.patch
  rdma-fix-duplicate-initialization-in-port_names.patch
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch
  utils-return-default-family-when-rtm_family-is-not-R.patch
  Really-fix-get_addr-and-get_prefix-error-messages.patch
  iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  ss-enclose-IPv6-address-in-brackets.patch
  lib-fix-extended-ack-with-and-without-libmnl.patch
  lib-need-to-pass-LIBMNL-flag.patch
  change-how-Config-is-used-in-Makefile-s.patch
  tc-ip-more-Makefile-updates-for-LIBMNL.patch
  lib-Dump-ext-ack-string-by-default.patch
  bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  libnetlink-Fix-extack-attribute-parsing.patch
  ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  ss-Fix-potential-memleak-in-unix_stats_print.patch
  iproute-Fix-for-missing-Oifs-display.patch
  ipmaddr-Avoid-accessing-uninitialized-data.patch
  ss-Fix-for-added-diag-support-check.patch
  link_gre6-Fix-for-changing-tclass-flowlabel.patch
  tc-actions-store-and-dump-correct-length-of-user-coo.patch
  ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  ip-maddr-fix-filtering-by-device.patch
  man-add-additional-explainations-for-ss.patch
  tc-move-action-cookie-print-out-of-the-stats-if.patch
  tc-remove-action-cookie-len-from-printout.patch
  link_gre6-Detect-invalid-encaplimit-values.patch
  man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  tc-bash-completion-add-missing-classid-keyword.patch
  gre-ip6tnl-tunnel-Fix-noencap-support.patch
  Restore-no-print-directory-option-for-silent-builds.patch
  iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467200">- normalize patches: remove git specific artefacts to reduce noise
  on future refreshes and updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467201">- fix misplaced patch tags:
  patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  patches/rdma-Ignore-unknown-netlink-attributes.patch
  patches/tc-fix-command-tc-actions-del-hang-issue.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467202">- spec file cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1547640000">- refresh all patches</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
</package>
<package pkgid="133240b5d11d74abe41e5be7d125a558a88b4669fac2badf63a36adf983f482b" name="iproute2-bash-completion" arch="x86_64">
  <version epoch="0" ver="6.4" rel="150600.7.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1523016000">- list of patches packed into patches.tar.xz on its creation (this
  is a fake changelog entry added to silence factory-auto bot):
  adjust-installation-directories-for-openSUSE-SLE.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  add-explicit-typecast-to-avoid-gcc-warning.patch
  xfrm-support-displaying-transformations-used-for-Mob.patch
  man-fix-documentation-references-in-manual-pages.patch
  split-link-and-compile-steps-for-binaries.patch
  examples-fix-bashisms-in-example-script.patch
  utils-Move-BIT-macro-to-common-header.patch
  rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  rdma-Add-dev-object.patch
  rdma-Add-link-object.patch
  rdma-Add-json-and-pretty-outputs.patch
  rdma-Implement-json-output-for-dev-object.patch
  rdma-Add-json-output-to-link-object.patch
  rdma-Add-initial-manual-for-the-tool.patch
  rdma-fix-duplicate-initialization-in-port_names.patch
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch
  utils-return-default-family-when-rtm_family-is-not-R.patch
  Really-fix-get_addr-and-get_prefix-error-messages.patch
  iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  ss-enclose-IPv6-address-in-brackets.patch
  lib-fix-extended-ack-with-and-without-libmnl.patch
  lib-need-to-pass-LIBMNL-flag.patch
  change-how-Config-is-used-in-Makefile-s.patch
  tc-ip-more-Makefile-updates-for-LIBMNL.patch
  lib-Dump-ext-ack-string-by-default.patch
  bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  libnetlink-Fix-extack-attribute-parsing.patch
  ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  ss-Fix-potential-memleak-in-unix_stats_print.patch
  iproute-Fix-for-missing-Oifs-display.patch
  ipmaddr-Avoid-accessing-uninitialized-data.patch
  ss-Fix-for-added-diag-support-check.patch
  link_gre6-Fix-for-changing-tclass-flowlabel.patch
  tc-actions-store-and-dump-correct-length-of-user-coo.patch
  ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  ip-maddr-fix-filtering-by-device.patch
  man-add-additional-explainations-for-ss.patch
  tc-move-action-cookie-print-out-of-the-stats-if.patch
  tc-remove-action-cookie-len-from-printout.patch
  link_gre6-Detect-invalid-encaplimit-values.patch
  man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  tc-bash-completion-add-missing-classid-keyword.patch
  gre-ip6tnl-tunnel-Fix-noencap-support.patch
  Restore-no-print-directory-option-for-silent-builds.patch
  iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467200">- normalize patches: remove git specific artefacts to reduce noise
  on future refreshes and updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467201">- fix misplaced patch tags:
  patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  patches/rdma-Ignore-unknown-netlink-attributes.patch
  patches/tc-fix-command-tc-actions-del-hang-issue.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547467202">- spec file cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1547640000">- refresh all patches</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
</package>
<package pkgid="8d66dc65a0d0040b28508e29b95a1819002b58c66eb1159575be192e49529ea2" name="iputils" arch="aarch64">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="d38fbdd19bd22f87eea639b6e275a3191ba5005f542c0167a0ceb101707caad7" name="iputils" arch="ppc64le">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="4eab822c2c43ab94e4151fcd03047f9b9421501a31bde50809cdaec5b47e147f" name="iputils" arch="s390x">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="cd559d2063b0bfc7b52cfe8205520378afa0631d9994a84bef96f9ac8becba12" name="iputils" arch="src">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="612d0b51622d91c24a9d8e4988faf8c4f988877200b98e41a1117fb7d259c403" name="iputils" arch="x86_64">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="77032afe4ad1ddf4dc4dcceeb230ca73a453e4b0a364126b681f5a56cb9ba0fe" name="iputils" arch="aarch64">
  <version epoch="0" ver="20221126" rel="150500.3.8.2"/>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1717416000">- Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
  after upstream merged the fix, update git commit hashes.</changelog>
</package>
<package pkgid="1a1136079dfe1e3a22417f98a73b0546c16c2675961517fd3d5cecea9db26f2d" name="iputils" arch="ppc64le">
  <version epoch="0" ver="20221126" rel="150500.3.8.2"/>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1717416000">- Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
  after upstream merged the fix, update git commit hashes.</changelog>
</package>
<package pkgid="5d661bc37557ee94688e8870dbe1b9f40816c78ba9311a65e9f38c67daebf871" name="iputils" arch="s390x">
  <version epoch="0" ver="20221126" rel="150500.3.8.2"/>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1717416000">- Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
  after upstream merged the fix, update git commit hashes.</changelog>
</package>
<package pkgid="38aff9347aac845da1f803207eaebcb146e2c1cdaffc4ee712d9c3007b29b685" name="iputils" arch="src">
  <version epoch="0" ver="20221126" rel="150500.3.8.2"/>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1717416000">- Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
  after upstream merged the fix, update git commit hashes.</changelog>
</package>
<package pkgid="a2677e7594a8b3b7d3fb65a32ec4e9188511ec0d3280342aec1dc795b08d36c5" name="iputils" arch="x86_64">
  <version epoch="0" ver="20221126" rel="150500.3.8.2"/>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1717416000">- Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
  after upstream merged the fix, update git commit hashes.</changelog>
</package>
<package pkgid="85d9a590f701aa9087fb52456bc9e0f31c0c04c0afb9038dfdbbefdd311b7e7f" name="java-11-openjdk" arch="aarch64">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="35609a54f62b71ca8e3904c6a497015942ef5b915dd2b9668146cdb769524edd" name="java-11-openjdk" arch="ppc64le">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="6055e6b2c75e4bf3d0aae543f07390b9cad751e75a5712bb245d729c298c43d0" name="java-11-openjdk" arch="s390x">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="9ae77825f4f49cf09d50c76bb106df725240994dcf7d2b0689f0a521e38a4551" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="4ae9f4de18dbe29be0038bd9cc3f640aafd0a0e49f3327b84d8e5b9d45db410e" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="907bb8f23b21ff76d789e19d4032cbd17c4507f9932997ae8ed1257c45119970" name="java-11-openjdk-demo" arch="aarch64">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="47b1ed12ce84b781e1ec8eee419987d7bdeaaee0d05689422066afaba5cd8910" name="java-11-openjdk-demo" arch="ppc64le">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="8006220d2a2fc7e23c487fe9ef172af0532df5c563a53ad5c6a364a62c8709c9" name="java-11-openjdk-demo" arch="s390x">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="f9955c010e8d92d8fbdc2e6b387c259b8d336e2168b01d886a03ac6251bb2bc9" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="d01e8de7c9c535be6329a729aaac08e258921da29c3fe585c49bf59a1dbf011c" name="java-11-openjdk-devel" arch="aarch64">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="a50f3324c743f0697a6b3779393aaaaab9c927ffdb8ce270ade9280721e6075b" name="java-11-openjdk-devel" arch="ppc64le">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="0031e728479c64cb297d2603974b3b063a210a8b2397519268d53ee84b24c3ed" name="java-11-openjdk-devel" arch="s390x">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="6c9c31bb8480e33c2d667e0f9f4efa0f86335538afbe2f0d1e77f93e52f93642" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="58c2d58b125dfe0b2ba8a8024dc1d67dc83b393fee73ee311b2e270462db386d" name="java-11-openjdk-headless" arch="aarch64">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="682cfbdae53fa1efe308f5ad8e5d2c1eef4090e2b6138ac6cbf061ecb9f08861" name="java-11-openjdk-headless" arch="ppc64le">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="4d90b9679fc3e17c07bb52a67b50744d01eac6144d21caa2063953dd90e572c0" name="java-11-openjdk-headless" arch="s390x">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="bc81fac6402302f783939895cec99e4b08c968e897e04931628c75535d8c198f" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="21f124eb859a0b7ad86897b0d41924075080b1770ad2cdb00c470a44fda4de75" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="59bdb14a14ad9bd76c0a966ec9f663a56cfd4a57084322ea8cd2720261a0b928" name="java-11-openjdk-jmods" arch="aarch64">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="2d820866ab06c5399fcf1b63066165c45017dee31448685b22e51d657471df0a" name="java-11-openjdk-jmods" arch="ppc64le">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="608fa39c37572c815ae4905bf7debce496e8662b0795ab2d377625552bb75a0d" name="java-11-openjdk-jmods" arch="s390x">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="f61a384e0dbf349265e24749d654099455bb803bf1c591234c32c4e4a88e597c" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="434e83c3f5e9f78d5e134529098040e61be23a6946424f0b1f0879b423837052" name="java-11-openjdk-src" arch="aarch64">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="1c9f4f0e6788d361d9d86eeb0591577544abd609ea53c57a806a8f80b5da4baf" name="java-11-openjdk-src" arch="ppc64le">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="c8cd18cf6b1ccf10743466030b213ece189d6fc3355d57bb388b35b0fa55cabe" name="java-11-openjdk-src" arch="s390x">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="e85a73754c79084255976790cc90983cef46cb8ed943154285f9db6d8568bcfd" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.23.0" rel="150000.3.113.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-6986863: ProfileDeferralMgr throwing
    ConcurrentModificationException
    + JDK-7124293: [macosx] VoiceOver reads percentages rather than
    the actual values for sliders.
    + JDK-7124301: [macosx] When in a tab group if you arrow
    between tabs there are no VoiceOver announcements.
    + JDK-8133713: [macosx] Accessible JTables always reported as
    empty
    + JDK-8139046: Compiler Control: IGVPrintLevel directive should
    set PrintIdealGraph
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8163498: Many long-running security libs tests
    + JDK-8166727: javac crashed: [jimage.dll+0x1942]
    ImageStrings::find+0x28
    + JDK-8169004: Fix redundant @requires tags in tests
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8182404: remove jdk.testlibrary.JDKToolFinder and
    JDKToolLauncher
    + JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
    + JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with
    java.net.ConnectException
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java
    fails with "expected 0 to equal 10"
    + JDK-8202886: [macos] Test java/awt/MenuBar/8007006/
    /bug8007006.java fails on MacOS
    + JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
    + JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld
    test
    + JDK-8206187: javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
    + JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003
    fails to start
    + JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after
    co-location
    + JDK-8208246: flags duplications in
    vmTestbase_vm_g1classunloading tests
    + JDK-8208249: TriggerUnloadingByFillingMetaspace generates
    garbage class names
    + JDK-8208697: vmTestbase/metaspace/stressHierarchy/
    /stressHierarchy012/TestDescription.java fails with
    OutOfMemoryError: Metaspace
    + JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a
    different test
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8209883: ZGC: Compile without C1 broken
    + JDK-8209920: runtime/logging/RedefineClasses.java fail with
    OOME with ZGC
    + JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread
    and XRun
    + JDK-8210039: move OSInfo to top level testlibrary
    + JDK-8210108: sun/tools/jstatd test build failures after
    JDK-8210022
    + JDK-8210112: remove jdk.testlibrary.ProcessTools
    + JDK-8210649: AssertionError @
    jdk.compiler/com.sun.tools.javac.comp.Modules.enter
    (Modules.java:244)
    + JDK-8210732: remove jdk.testlibrary.Utils
    + JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader
    after JDK-6788458
    + JDK-8211822: Some tests fail after JDK-8210039
    + JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
    + JDK-8212151: jdi/ExclusiveBind.java times out due to "bind
    failed: Address already in use" on Solaris-X64
    + JDK-8213440: Lingering INCLUDE_ALL_GCS in
    test_oopStorage_parperf.cpp
    + JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic
    constant has no fixed basic type"
    + JDK-8214799: Add package declaration to each JTREG test case
    in the gc folder
    + JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges
    to enable MacOS tests on Mach5
    + JDK-8216137: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8216265: [testbug] Introduce
    Platform.sharedLibraryPathVariableName() and adapt all tests.
    + JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
    + JDK-8217233: Update build settings for AIX/xlc
    + JDK-8217340: Compilation failed:
    tools/launcher/Test7029048.java
    + JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP
    docker containers
    + JDK-8218136: minor hotspot adjustments for xlclang++ from
    xlc16 on AIX
    + JDK-8218751: Do not store original classfiles inside the CDS
    archive
    + JDK-8218965: aix:  support xlclang++ in the compiler detection
    + JDK-8220658: Improve the readability of container information
    in the error log
    + JDK-8220813: update hotspot tier1_gc tests depending on GC to
    use @requires vm.gc.X
    + JDK-8222799: java.beans.Introspector uses an obsolete methods
    cache
    + JDK-8222926: Shenandoah build fails with
  - -with-jvm-features=-compiler1
    + JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
    + JDK-8223363: Bad node estimate assertion failure
    + JDK-8223502: Node estimate for loop unswitching is not
    correct: assert(delta &lt;= 2 * required) failed: Bad node estimate
    + JDK-8224648: assert(!exceeding_node_budget()) failed: Too
    many NODES required! failure with ctw
    + JDK-8223389: Shenandoah optimizations fail with
    assert(!phase-&gt;exceeding_node_budget())
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8225475: Node budget asserts on x86_32/64
    + JDK-8227171: provide function names in native stack trace on
    aix with xlc16
    + JDK-8227389: Remove unsupported xlc16 compile options on aix
    + JDK-8229210: [TESTBUG] Move gc stress tests from JFR
    directory tree to gc/stress
    + JDK-8229486: Replace wildcard address with loopback or local
    host in tests - part 21
    + JDK-8229499: Node budget assert in fuzzed test
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8231454: File lock in Windows on a loaded jar due to a
    leak in Introspector::getBeanInfo
    + JDK-8231489: GC watermark_0_1 failed due to
    "metaspace.gc.Fault: GC has happened too rare"
    + JDK-8231565: More node budget asserts in fuzzed tests
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8234382: Test tools/javac/processing/model/
    /testgetallmembers/Main.java using too small heap
    + JDK-8234605: C2 failed "assert(C-&gt;live_nodes() -
    live_at_begin &lt;= 2 * _nodes_required) failed: Bad node
    estimate: actual = 208 &gt;&gt; request = 101"
    + JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a
    memory leak
    + JDK-8235220: ClhsdbScanOops.java fails with
    sun.jvm.hotspot.types.WrongTypeException
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8240335: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + JDK-8240734: ModuleHashes attribute not reproducible between
    builds
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8241707: introduce randomness k/w to hotspot test suite
    + JDK-8242310: use reproducible random in hotspot compiler tests
    + JDK-8242311: use reproducible random in hotspot runtime tests
    + JDK-8242312: use reproducible random in hotspot gc tests
    + JDK-8242313: use reproducible random in hotspot svc tests
    + JDK-8242538: java/security/SecureRandom/ThreadSafe.java
    failed on windows
    + JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
    + JDK-8243666: ModuleHashes attribute generated for JMOD and
    JAR files depends on timestamps
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245938: Remove unused print_stack(void) method from
    XToolkit.c
    + JDK-8246494: introduce vm.flagless at-requires property
    + JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac
    address uniqueness test failed
    + JDK-8247589: Implementation of Alpine Linux/x64 Port
    + JDK-8247591: Document Alpine Linux build steps in OpenJDK
    build guide
    + JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
    + JDK-8247614: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with
    "ConnectException: Connection refused: connect"
    + JDK-8252248: __SIGRTMAX is not declared in musl libc
    + JDK-8252250: isnanf is obsolete
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253872: ArgumentHandler must use the same delimiters as
    in jvmti_tools.cpp
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254887: C2: assert(cl-&gt;trip_count() &gt; 0) failed: peeling
    a fully unrolled loop
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8255604: java/nio/channels/DatagramChannel/Connect.java
    fails with java.net.BindException: Cannot assign requested
    address: connect
    + JDK-8255787: Tag container tests that use cGroups with
    cgroups keyword
    + JDK-8256146: Cleanup test/jdk/java/nio/channels/
    /DatagramChannel/Connect.java
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8257794: Zero: assert(istate-&gt;_stack_limit ==
    istate-&gt;_thread-&gt;last_Java_sp() + 1) failed: wrong on
    Linux/x86_32
    + JDK-8258795: Update IANA Language Subtag Registry to Version
    2021-05-11
    + JDK-8258956: Memory Leak in StringCoding on ThreadLocal
    resultCached StringCoding.Result
    + JDK-8259517: Incorrect test path in test cases
    + JDK-8260518: Change default -mmacosx-version-min to 10.12
    + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263718: unused-result warning happens at os_linux.cpp
    + JDK-8263856: Github Actions for macos/aarch64 cross-build
    + JDK-8264179: [TESTBUG] Some compiler tests fail when running
    without C2
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265297: javax/net/ssl/SSLSession/
    /TestEnabledProtocols.java failed with "RuntimeException:
    java.net.SocketException: Connection reset"
    + JDK-8265343: Update Debian-based cross-compilation recipes
    + JDK-8266251: compiler.inlining.InlineAccessors shouldn't do
    testing in driver VM
    + JDK-8266318: Switch to macos prefix for macOS bundles
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8269772: [macos-aarch64] test compilation failed with
    "SocketException: No buffer space available"
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8275082: Update XML Security for Java to 2.3.0
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated
    by definitions
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
    + JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on
    MacOS aarch64 in jdk 11
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest
    in 11u because of intermittent java.lang.AssertionError:
    duplicate classes for name Ljava/lang/Boolean;
    + JDK-8283424: compiler/loopopts/
    /LoopUnswitchingBadNodeBudget.java fails with release VMs due
    to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283614: [11] Repair compiler versions handling after
    8233787
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and
    TestGCOldWithCMS.java because of 8272195
    + JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623:
    InstalledCode
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails to compile after backport of 8273655
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on
    Windows
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
    + JDK-8287739: [11u] ProblemList sun/security/ssl/
    /SSLSessionImpl/NoInvalidateSocketException.java</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-11.0.17+8 (October 2022 CPU)
  * Security fixes:
    + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2
    client usage
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer
    service
    + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon
    presentations
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286511: Improve macro allocation
    + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support
    + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages
    + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte
    conversions
    + JDK-8286519: Better memory handling
    + JDK-8285662: Better permission resolution
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
    + JDK-8293429: [11u] minor update in attribute style
  * Other fixes:
    + JDK-6606767: resexhausted00[34] fail
    assert(!thread-&gt;owns_locks(), "must release all locks when
    leaving VM")
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on mac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java
    to use jtreg @requires
    + JDK-8139348: Deprecate 3DES and RC4 in Kerberos
    + JDK-8159694: HiDPI, Unity,
    java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    makes not reliable time assumption
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8183372: Refactor java/lang/Class shell tests to java
    + JDK-8186143: keytool -ext option doesn't accept wildcards for
    DNS subject alternative names
    + JDK-8193462: Fix Filer handling of package-info initial
    elements
    + JDK-8203277: preflow visitor used during lambda attribution
    shouldn't visit class definitions inside the lambda body
    + JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails
    with "Prompt is not received during 300200 milliseconds"
    + JDK-8209052: Low contrast in docs/api/constant-values.html
    + JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails
    with NullPointerException when running in CDS mode
    + JDK-8210107: vmTestbase/nsk/stress/network tests fail with
    Cannot assign requested address (Bind failed)
    + JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3
    generate incorrect messages upon failure
    + JDK-8210960: Allow --with-boot-jdk-jvmargs to work during
    configure
    + JDK-8212904: JTextArea line wrapping incorrect when using UI
    scale
    + JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in
    some configs
    + JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8215291: Broken links when generating from project
    without modules
    + JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java
    timed out
    + JDK-8217332: JTREG: Clean up, use generics instead of raw
    types
    + JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003 and 004 use wrong path to test classes
    + JDK-8218413: make reconfigure ignores configure-time AUTOCONF
    environment variable
    + JDK-8219074: [TESTBUG] runtime/containers/docker/
    /TestCPUAwareness.java typo of printing parameters (period
    should be shares)
    + JDK-8219149: ProcessTools.ProcessBuilder should print timing
    info for subprocesses
    + JDK-8220744: [TESTBUG] Move RedefineTests from runtime to
    serviceability
    + JDK-8221871: javadoc should not set role=region on &lt;section&gt;
    elements
    + JDK-8221907: make reconfigure breaks when configured with
    relative paths
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8223575: add subspace transitions to gc+metaspace=info
    log lines
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8226976: SessionTimeOutTests uses == operator for String
    value check
    + JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
    + JDK-8233712: Limit default tests jobs based on ulimit -u
    setting
    + JDK-8235870: C2 crashes in
    IdealLoopTree::est_loop_flow_merge_sz()
    + JDK-8236490: Compiler bug relating to @NonNull annotation
    + JDK-8236823: Ensure that API documentation uses minified
    libraries
    + JDK-8238203: Return value of GetUserDefaultUILanguage()
    should be handled as LANGID
    + JDK-8238268: Many SA tests are not running on OSX because
    they do not attempt to use sudo when available
    + JDK-8238196: tests that use SA Attach should not be allowed
    to run against signed binaries on Mac OS X 10.14.5 and later
    + JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed
    when TieredCompilation is disabled
    + JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
    + JDK-8239379: ProblemList
    serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
    + JDK-8271512: ProblemList serviceability/sa/sadebugd/
    /DebugdConnectTest.java due to 8270326
    + JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with
  - XX:-TieredCompilation
    + JDK-8239902: [macos] Remove direct usage of JSlider,
    JProgressBar classes in CAccessible class
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8242188: error in jtreg test jdk/jfr/api/consumer/
    /TestRecordedFrame.java on linux-aarch64
    + JDK-8247546: Pattern matching does not skip correctly over
    supplementary characters
    + JDK-8247907: XMLDsig logging does not work
    + JDK-8247964: All log0() in
    com/sun/org/slf4j/internal/Logger.java should be private
    + JDK-8249623: test @ignore-d due to 7013634 should be returned
    back to execution
    + JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
    + JDK-8251551: Use .md filename extension for README
    + JDK-8252145: Unify Info.plist files with correct version
    strings
    + JDK-8253829: Wrong length compared in SSPI bridge
    + JDK-8253916: ResourceExhausted/resexhausted001 crashes on
    Linux-x64
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8255729: com.sun.tools.javac.processing.JavacFiler
    .FilerOutputStream  is inefficient
    + JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted001/TestDescription.java shouldn't use timeout
    + JDK-8258946: Fix optimization-unstable code involving signed
    integer overflow
    + JDK-8261160: Add a deserialization JFR event
    + JDK-8262085: Hovering Metal HTML Tooltips in different
    windows cause IllegalArgExc on Linux
    + JDK-8264400: (fs) WindowsFileStore equality depends on how
    the FileStore was constructed
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265100: (fs) WindowsFileStore.hashCode() should read
    cached hash code once
    + JDK-8265531: doc/building.md should mention homebrew install
    freetype
    + JDK-8266250: WebSocketTest and WebSocketProxyTest call
    assertEquals(List&lt;byte[]&gt;, List&lt;byte[]&gt;)
    + JDK-8266254: Update to use jtreg 6 8265020: tests must be
    updated for new TestNG module name
    + JDK-8266460: java.io tests fail on null stream with upgraded
    jtreg/TestNG
    + JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static
    @Test methods 8267180: Typo in copyright header  for
    HashesTest
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8266675: Optimize IntHashTable for encapsulation and ease
    of use
    + JDK-8266774: System property values for stdout/err on Windows
    UTF-8
    + JDK-8266881: Enable debug log for
    SSLEngineExplorerMatchedSNI.java
    + JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java
    expectedNewSize calculation
    + JDK-8267880: Upgrade the default PKCS12 MAC algorithm
    + JDK-8268185: Update GitHub Actions for jtreg 6
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269517: compiler/loopopts/
    /TestPartialPeelingSinkNodes.java crashes with
  - XX:+VerifyGraphEdges
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/
    /TestDescription.java crashes intermittently
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8277893: Arraycopy stress tests
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283803: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix
    test
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8283712: Create a manual test framework class
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284882: SIGSEGV in Node::verify_edges due to compilation
    bailout
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290198: Shenandoah: a few Shenandoah tests failure after
    JDK-8214799 11u backport
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290813: jdk/nashorn/api/scripting/test/
    /ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
    + JDK-8290886: [11u]: Backport of JDK-8266250 introduced test
    failures
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8291713: assert(!phase-&gt;exceeding_node_budget()) failed:
    sanity after JDK-8223389
    + JDK-8291794: [11u] Corrections after backport of JDK-8212028
    + JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
    + JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when
    allocating array of size too large (bsc#1204523)
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after
    JDK-8292768
    + JDK-8295057: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667908800">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6829250: Reg test:
    java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails
    in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/
    /ModalInternalFrameTest/ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8172269: When checking the default behaviour for a scroll
    tab layout and checking the 'opaque' checkbox, the area behind
    tabs is not red.
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8193942: Regression automated test '/open/test/jdk/javax/
    /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
    + JDK-8194126: Regression automated Test '/open/test/jdk/javax/
    /swing/JColorChooser/Test7194184.java' fails
    + JDK-8198343: Test java/awt/print/PrinterJob/
    /TestPgfmtSetMPA.java may fail w/o printer
    + JDK-8199290: [TESTBUG]
    sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8206125: [windows] cannot pass relative path to
  - -with-boot-jdk
    + JDK-8210047: some pages contain content outside of landmark
    region
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due
    to SSLException: Tag mismatch
    + JDK-8213239: Configure cannot handle command overrides with
    arguments
    + JDK-8215571: jdb does not include jdk.* in the default class
    filter
    + JDK-8217032: Check pandoc capabilities in configure
    + JDK-8222091: Javadoc does not handle package annotations
    correctly on package-info.java
    + JDK-8222251: preflow visitor is not visiting lambda
    expressions
    + JDK-8226236: win32: gc/metaspace/
    /TestCapacityUntilGCWrapAround.java fails
    + JDK-8227179: Test for new gc+metaspace=info output format
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java
    fails on 32-bit platforms
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on
    MacOS
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8239708: Split basics.m4 into basic.m4 and util.m4
    + JDK-8240281: Remove failing assertion code when selecting
    first memory state in SuperWord::co_locate_pack
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243565: some gc tests use 'test.java.opts' and not
    'test.vm.opts'
    + JDK-8243568: serviceability/logging/TestLogRotation.java uses
    'test.java.opts' and not 'test.vm.opts'
    + JDK-8244010: Simplify usages of
    ProcessTools.createJavaProcessBuilder in our tests
    + JDK-8244557: test/jdk/javax/swing/JTabbedPane/
    /TestBackgroundScrollPolicy.java failed
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and
    j/l/StringBuilder/HugeCapacity.java tests shouldn't be
    @ignore-d
    + JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing
    "Evacuation failure" message
    + JDK-8254874: ZGC: JNIHandleBlock verification failure in
    stack watermark processing
    + JDK-8254976: Re-enable swing jtreg tests which were broken
    due to samevm mode
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256109: Create implementation for NSAccessibilityButton
    protocol
    + JDK-8257679: Improved unix compatibility layer in Windows
    build (winenv)
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259485: Document need for short paths when building on
    Windows
    + JDK-8260272: bash configure --prefix does not work after
    JDK-8257679
    + JDK-8261336: IGV: enhance default filters
    + JDK-8261445: Use memory_order_relaxed for os::random().
    + JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if
    ergonomics detect too small InitialHeapSize
    + JDK-8263326: Remove ReceiverTypeData check from
    serviceability/sa/TestPrintMdo.java
    + JDK-8263871: On sem_destroy() failing we should assert
    + JDK-8264593: debug.cpp utilities should be available in
    product builds.
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266967: debug.cpp utility find() should print Java
    Object fields.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269873: serviceability/sa/Clhsdb tests are using a C2
    specific VMStruct field
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/
    /print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8280158: New test from JDK-8274736 failed with/without
    patch in JDK11u
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8289043: C2: Vector constant materialization attempt
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291461: assert(false) failed: bad AD file
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293672: Update freetype md file
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296652: Restore windows aarch64 fixpath patch that was
    removed in 8239708
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8298737: 8296772 backport to jdk11u caused build error on
    sparc
    + JDK-8299393: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.18
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8035787: SourcePositions are wrong for Strings
    concatenated with '+' operator
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129315: java/net/Socket/LingerTest.java and
    java/net/Socket/ShutdownBoth.java timeout intermittently
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
    fails intermittently with Invalid Http response
    + JDK-8171405: java/net/URLConnection/ResendPostBody.java
    failed with "Error while cleaning up threads after test"
    + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
    + JDK-8247741: Test  test/hotspot/jtreg/runtime/7162488/
    /TestUnrecognizedVmOption.java fails when
  - XX:+IgnoreUnrecognizedVMOptions is set
    + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
    TLS protocols
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
    failed w/ Xcomp
    + JDK-8195716: BootstrapLoggerTest : Executor still alive
    + JDK-8202621: bad test with broken links needs to be updated
    + JDK-8207248: Reduce incidence of
    compiler.warn.source.no.bootclasspath in javac tests
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
    + JDK-8209115: adjust libsplashscreen linux ppc64le builds for
    easier libpng update
    + JDK-8209774: Refactor shell test
    javax/xml/jaxp/common/8035437/run.sh to java
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
    "net" libraries in parallel.
    + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
    + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
    + JDK-8213130: Update ProblemList after verification of jtreg
    tests in Win 7
    + JDK-8213265: fix missing newlines at end of files
    + JDK-8213932: [TESTBUG] assertEquals is invoked with the
    arguments in the wrong order
    + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
    reflective access
    + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
    not correct when using a glob
    + JDK-8215759: [test] java/math/BigInteger/ModPow.java can
    throw an ArithmeticException
    + JDK-8217353: java/util/logging/LogManager/Configuration/
    /updateConfiguration/HandlersOnComplexResetUpdate.java fails
    with Unexpected reference: java.lang.ref.WeakReference
    + JDK-8217730: Split up MakeBase.gmk
    + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
    failed with "java.net.ConnectException"
    + JDK-8218431: Improved platform checking in makefiles
    + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
    + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
    fails
    + JDK-8221351: Crash in
    KlassFactory::check_shared_class_file_load_hook
    + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
    comments
    + JDK-8222430: Add tests for ElementKind predicates
    + JDK-8223463: Replace wildcard address with loopback or local
    host in tests - part 2
    + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
    should be more resilient to unexpected traffic
    + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8224024: java/util/concurrent/BlockingQueue/
    /DrainToFails.java testBounded fails intermittently
    + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java still fails due to wrong number of
    MonitorContendedEntered events
    + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
    /TestDescription.java fails on jvmti-&gt;InterruptThread
    (JVMTI_ERROR_THREAD_NOT_ALIVE)
    + JDK-8227422: sun/net/www/protocol/file/
    /DirPermissionDenied.java failed on Windows 2016 because
    DirPermissionDenied directory has no read permission
    + JDK-8230374: maxOutputSize, instead of
    javatest.maxOutputSize, should be used in TEST.properties
    + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
    failed"
    + JDK-8231595: [TEST] develop a test case for SuspendThreadList
    including current thread
    + JDK-8233462: serviceability/tmtools/jstat tests times out
    with -Xcomp
    + JDK-8235448: code cleanup in SSLContextImpl.java
    + JDK-8238936: The crash in XRobotPeer when the custom
    GraphicsDevice is used
    + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
    is unstable
    + JDK-8244592: Start supporting SOURCE_DATE_EPOCH
    + JDK-8245245: WebSocket can lose the URL encoding of URI query
    parameters
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8245654: Add Certigna Root CA
    + JDK-8248306: gc/stress/gclocker/
    /TestExcessGCLockerCollections.java does not compile
    + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
    removed
    + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
    + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
    System.getProperty("test.nativepath")
    + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
    /CtrlASCII.java on Linux
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
    with "RuntimeException: Unexpected log output:"
    + JDK-8255710: Opensource unit/regression tests for CMM
    + JDK-8256110: Create implementation for NSAccessibilityStepper
    protocol
    + JDK-8256111: Create implementation for
    NSAccessibilityStaticText protocol
    + JDK-8256126: Create implementation for NSAccessibilityImage
    protocol peer
    + JDK-8256240: Reproducible builds should turn on the
    "deterministic" flag for Visual Studio
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8256934: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8257928: Test image build failure with clang-10 due to
  - Wmisleading-indentation
    + JDK-8258005: JDK build fails with incorrect fixpath script
    + JDK-8259265: Refactor UncaughtExceptions shell test as java
    test.
    + JDK-8259267: Refactor LoaderLeak shell test as java test.
    + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
    /Main.java fails with -Xcomp
    + JDK-8260576: Typo in compiler/runtime/safepoints/
    /TestRegisterRestoring.java
    + JDK-8261270: MakeMethodNotCompilableTest fails with
  - XX:TieredStopAtLevel={1,2,3}
    + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
    timed out
    + JDK-8261350: Create implementation for
    NSAccessibilityCheckBox protocol peer
    + JDK-8261351: Create implementation for
    NSAccessibilityRadioButton protocol
    + JDK-8261352: Create implementation for component peer for all
    the components who should be ignored in a11y interactions
    + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
    out
    + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
    fails intermittently
    + JDK-8264299: Create implementation of native accessibility
    peer for ScrollPane and ScrollBar Java Accessibility roles
    + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
    relies on default platform encoding
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to Version
    2022-03-02
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8272985: Reference discovery is confused about atomicity
    and degree of parallelism
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8279614: The left line of the TitledBorder is not painted
    on 150 scale factor
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
    fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when the
    locale is ja, zh_CN or de
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not throw
    CloneNotSupportedException
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8286030: Avoid JVM crash when containers share the same
    /tmp dir
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
    strong
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
    once with ConnectException
    + JDK-8287011: Improve container information
    + JDK-8287180: Update IANA Language Subtag Registry to Version
    2022-08-08
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290899: java/lang/String/StringRepeat.java test requests
    too much heap on windows x86
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8290964: C2 compilation fails with assert "non-reduction
    loop contains reduction nodes"
    + JDK-8292863: assert(_print_inlining_stream-&gt;size() &gt; 0)
    failed: missing inlining msg
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294378: URLPermission constructor exception when using
    tr locale
    + JDK-8294580: frame::interpreter_frame_print_on() crashes if
    free BasicObjectLock exists in frame
    + JDK-8294705: Disable an assertion in
    test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
    + JDK-8294947: Use 64bit atomics in patch_verified_entry on
    x86_64
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
    should use literals"
    + JDK-8295405: Add cause in a couple of
    IllegalArgumentException and InvalidParameterException shown
    by sun/security/pkcs11 tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295530: Update Zlib Data Compression Library to Version
    1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296611: Problemlist several sun/security tests until
    + JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField and
    setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with assert(i &lt;
    _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
    + JDK-8297264: C2: Cast node is not processed again in CCP and
    keeps a wrong too narrow type which is later replaced by top
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
    result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to verify
    the content change of TextComponent sends TextEvent
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297951: C2: Create skeleton predicates for all If nodes
    in loop predication
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree build
    directory for source zip creation
    + JDK-8298527: Cygwin's uname -m returns different string than
    before
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future date
    + JDK-8299296: Write a test to verify the components selection
    sends ItemEvent
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299520: TestPrintXML.java output error messages in case
    compare fails
    + JDK-8299596: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
    + JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
    backport
    + JDK-8299789: Compilation of gtest causes build to fail if
    runtime libraries are in different dirs
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8300424: [11u] Chunk lost in backport of 8297569
    + JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
    for -dev
    + JDK-8300742: jstat's CGCT is 5 percent higher than the pause
    time in -Xlog:gc.
    + JDK-8300773: Address the inconsistency between the constant
    array and pool size
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
    JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302000: [11u] A subtle race condition during jdk11u
    build
    + JDK-8218460: Test generation scripts do not invoke stream
    preprocessor correctly
    + JDK-8302657: [11u] Add missing '(' in makefile after backport
    of 8218431
    + JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
    + JDK-8302903: [11u] Add modified test snippet after backport
    of JDK-8221871
    + JDK-8303075: [11u] Add CompileClassWithDebugTest to
    ProblemList for 8303074
    + JDK-8304389: [11u] Crash on Windows in C2 compiled code after
    8248238 and 8218431
- Modified patch:
  * fips.patch
    + adapt to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8298676: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
    + JDK-8209167: Use CLDR's time zone mappings for Windows
    + JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
    + JDK-8209880: tzdb.dat is not reproducibly built
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8214459: NSS source should be removed
    + JDK-8214807: Improve handling of very old class files
    + JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
    + JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
    + JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
    + JDK-8243936: NonWriteable system properties are actually
    writeable
    + JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
    + JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
    + JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
    + JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
    + JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
    + JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
    + JDK-8301401: Allow additional characters for GB18030-2022
    support
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
    + JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8307134: Add GTS root CAs
    + JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
    + JDK-8308006: Missing NMT memory tagging in CMS
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
    + JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
  * system-crypto-policy.patch
    + folded into modified fips.patch
- Modified patch:
  * fips.patch
    + fold in the system-crypto-policy.patch
    + regenerate to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="fstrba@suse.com" date="1697630401">- Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU)
  * Security fixes:
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8286503: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8305815: Update Libpng to 1.6.39
    + JDK-8306881: Update FreeType to 2.13.0
  * Other fixes:
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-8023980: JCE doesn't provide any class to handle RSA
    private key in PKCS#1
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8158880: test/java/time/tck/java/time/format/
    /TCKDateTimeFormatterBuilder.java fail with zh_CN locale
    + JDK-8168261: Use server cipher suites preference by default
    + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently
    with bind failed: Address already in use
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8211343: nsk_jvmti_parseoptions should handle multiple
    suboptions
    + JDK-8212045: Add back the tests that were removed from
    HashesTest.java and AddExportsTest.java
    + JDK-8216059: nsk_jvmti_parseoptions still has dependency on
    tilde separator
    + JDK-8217237: HttpClient does not deal well with multi-valued
    WWW-Authenticate challenge headers
    + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}
    + JDK-8217612: (CL)HSDB cannot show some JVM flags
    + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after
    JDK-8217612
    + JDK-8218471: generate-unsafe-access-tests.sh does not
    correctly invoke build.tools.spp.Spp
    + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags
    fails with -othervm
    + JDK-8220410: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed with missing expected output
    + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/
    /thrstat001/TestDescription.java times out
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8223573: Replace wildcard address with loopback or local
    host in tests - part 4
    + JDK-8223714: HTTPSetAuthenticatorTest could be made more
    resilient
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8223856: Replace wildcard address with loopback or local
    host in tests - part 8
    + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found
    filesystem twice
    + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/
    /LDAPCertStoreImpl.java
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs
    + JDK-8228341: SignTwice.java fails intermittently on Windows
    + JDK-8228403: SignTwice.java failed with
    java.io.FileNotFoundException: File name too long
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8229333: java/io/File/SetLastModified.java timed out
    + JDK-8229338: clean up
    test/jdk/java/util/RandomAccess/Basic.java
    + JDK-8229348: java/net/DatagramSocket/
    /UnreferencedDatagramSockets.java fails intermittently
    + JDK-8229481: sun/net/www/protocol/https/
    /ChunkedOutputStream.java failed with a SSLException
    + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails
    without IPv6
    + JDK-8230132: java/net/NetworkInterface/
    /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling
    Pseudo-Interface
    + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails
    intermittently due to reverse lookup failed
    + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java
    fails on SLES11 using mozilla-nss-3.14
    + JDK-8231516: network QuickAckTest.java failed due to
    "SocketException: maximum number of DatagramSockets reached"
    + JDK-8232101: (sctp) Add minimal sanity tests for SCTP
    + JDK-8232195: Enable BigInteger tests: DivisionOverflow,
    SymmetricRangeTests and StringConstructorOverflow
    + JDK-8232840: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java fails due to "OutOfMemoryError:
    Requested array size exceeds VM limit"
    + JDK-8232922: Add java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java to ProblemList-Xcomp
    + JDK-8234808: jdb quoted option parsing broken
    + JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with
    missing WhiteBox$WhiteBoxPermission.class
    + JDK-8237183: Bug ID missing for test in patch which fixed
    JDK-8230665
    + JDK-8238157: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java test failures
    because of revocation date
    + JDK-8239007: java/math/BigInteger/largeMemory/ tests should
    be disabled on 32-bit platforms
    + JDK-8239264: Clearup the legacy ObjectIdentifier constructor
    from int array
    + JDK-8239333: Mark test AmazonCA.java with intermittent key
    + JDK-8239537: cgroup MetricsTester testMemorySubsystem fails
    sometimes when testing memory.kmem.tcp.usage_in_bytes
    + JDK-8240193: loadLibrary("osxsecurity") should not be removed
    + JDK-8241097: java/math/BigInteger/largeMemory/
    /SymmetricRangeTests.java requires -XX:+CompactStrings
    + JDK-8242151: Improve OID mapping and reuse among JDK security
    providers for aliases registration
    + JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed
    with java.security.InvalidKeyException
    + JDK-8243210: ClhsdbScanOops fails with NullPointerException
    in FileMapHeader.inCopiedVtableSpace
    + JDK-8244078: ProcessTools executeTestJvm and
    createJavaProcessBuilder have inconsistent handling of
    test.*.opts
    + JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)
    + JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/
    /security.properties has wrong header
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java
    should use @requires instead of @ignore
    + JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/
    /B6393710.java does not scale socket timeout
    + JDK-8252530: Fix inconsistencies in hotspot whitebox
    + JDK-8254350: CompletableFuture.get may swallow
    InterruptedException
    + JDK-8255348: NPE in PKIXCertPathValidator event logging code
    + JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine/TestDescription.java crash intermittently
    + JDK-8259796: timed CompletableFuture.get may swallow
    InterruptedException
    + JDK-8260274: Cipher.init(int, key) does not use highest
    priority provider for random bytes
    + JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr
    + JDK-8260934: java/lang/StringBuilder/HugeCapacity.java fails
    without Compact Strings
    + JDK-8263970: Manual test javax/swing/JTextField/
    /JapaneseReadingAttributes/JapaneseReadingAttributes.java
    failed
    + JDK-8265980: Fix systemDictionary and loaderConstraints
    printing
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8277353: java/security/MessageDigest/
    /ThreadSafetyTest.java test times out
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be
    zero
    + JDK-8292033: Move jdk.X509Certificate event logic to JCA layer
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should test
    always-failing cases
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293562: KeepAliveCache Blocks Threads while Closing
    Connections
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8297437: javadoc cannot link to old docs (with old style
    anchors)
    + JDK-8297523: Various GetPrimitiveArrayCritical miss result -
    NULL check
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300751: [17u] Remove duplicate entry in javac.properties
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304498: JShell does not switch to raw mode when there is
    no /bin/test
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8305074: ProblemList
    javax/net/ssl/DTLS/RespondToRetransmit.java
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309108: Bump update version for OpenJDK: jdk-11.0.21
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310176: JDK 11 G1 crash during full GC with
    +UseStringDeduplication
    + JDK-8310620: [11u] Problemlist failing aot tests on macos x64
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8312138: jcmd VM.metaspace vslist has no newline
    character before the Class: label.
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313159: [11u] Fix test SSLEngineKeyLimit.java after
    Merge error
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313803: [11u] Exclude jdk/jfr/event/sampling/
    /TestStackFrameLineNumbers.java
    + JDK-8313878: Exclude two compiler/rtm/locking tests on ppc64le
    + JDK-8314086: [11u] A typo in the fix for JDK-8312462 is
    causing test failure in ChildAlwaysOnTopTest.java
    + JDK-8314950: CMS may miss NMT tag after mark stack expansion
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315529: [11u] Exclude some failing Z-GC tests
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317644: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.21
- Modified patches:
  * adlc-parser.patch
    + extend to initialize all the members to NULL
  * fips.patch
  * nss-security-provider.patch
  * reproducible-javadoc-timestamp.patch
    + rediff</changelog>
  <changelog author="schwab@suse.de" date="1697630402">- Configure with --with-native-debug-symbols=internal to enable
  generation of debuginfo packages</changelog>
  <changelog author="fstrba@suse.com" date="1705579200">- Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU)
  * Security fixes
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance
    verification of verifier
    + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn
    performance
    + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop
    handling
    + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler
    loops
    + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature
    handling
    + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS
    connection support
  * Other fixes
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8026393: jarsigner never shows a warning in badKeyUsage
    case
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8053479: (dc) DatagramChannel.read() throws exception
    instead of discarding data when buffer too small
    + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574
    fails and perf regression
    + JDK-8153090: TAB key cannot change input focus after the
    radio button in the Color Selection dialog
    + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8183374: Refactor java/lang/Runtime shell tests to java
    + JDK-8185531: [TESTBUG] Improve test configuration for shared
    strings
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8197825: [Test] Intermittent timeout with javax/swing
    JColorChooser Test
    + JDK-8205467: javax/management/remote/mandatory/connection/
    /MultiThreadDeadLockTest.java possible deadlock
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1
    .code__00201m1 hangs with -noverify
    + JDK-8210265: Crash in HSpaceCounters::update_used()
    + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test
    case!
    + JDK-8212997: [TESTBUG] Remove defmeth tests for class file
    versions 50 and 51
    + JDK-8213898: CDS dumping of springboot asserts in
    G1ArchiveAllocator::alloc_new_region
    + JDK-8214694: cleanup rawtypes warnings in open jndi tests
    + JDK-8217329: JTREG: Clean up, remove unused imports in gc
    folder
    + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/
    /b6969574/INDIFY_Test.java fails with -Xcomp
    + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in
    JDK networking tests
    + JDK-8221396: Clean up serviceability/sa/TestUniverse.java
    + JDK-8223145: Replace wildcard address with loopback or local
    host in tests - part 1
    + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog
    may capture focus using TAB Key.
    + JDK-8224035: Replace wildcard address with loopback or local
    host in tests - part 9
    + JDK-8224204: Replace wildcard address with loopback or local
    host in tests - part 10
    + JDK-8226825: Replace wildcard address with loopback or local
    host in tests - part 19
    + JDK-8230435: Replace wildcard address with loopback or local
    host in tests - part 22
    + JDK-8230858: Replace wildcard address with loopback or local
    host in tests - part 23
    + JDK-8231556: Wrong font ligatures used when 2 versions of
    same font used
    + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java
    looks for wrong string with Shenandoah
    + JDK-8232135: Add diagnostic output to test
    java/util/ProcessBuilder/Basic.java
    + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with BindException
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/
    /deoptimize test as stress test
    + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and
    test cleanup.
    + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR
    incorrectly
    + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java
    should not specify a TLS protocol
    + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files
    incorrectly
    + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/
    /CustomLauncherTest.java test to make binaries from source
    file
    + JDK-8240754: Instrument FlowTest.java to provide more debug
    traces.
    + JDK-8242330: Arrays should be cloned in several JAAS Callback
    classes
    + JDK-8244508: JFR: FlightRecorderOptions reset date format
    + JDK-8249812: java/net/DatagramSocket/PortUnreachable.java
    still fails intermittently with SocketTimeoutException
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java
    timed out
    + JDK-8259266: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo 2&lt;' missing from
    stdout/stderr"
    + JDK-8260035: Deproblemlist few problemlisted test
    + JDK-8260431: com/sun/jdi/JdbOptions.java failed with
    "RuntimeException: 'prop[boo] = &gt;foo&lt;' missing from
    stdout/stderr"
    + JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use
    clear()
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/
    /ActualFocusedWindowBlockingTest.java fails intermittentently
    on windows
    + JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java
    fails on macOS
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with
    "Total [200] - Expected [400]"
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8282143: Objects.requireNonNull should be ForceInline
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is
    unstable in MacOS machines
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289584: (fs) Print size values in
    java/nio/file/FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293466: libjsig should ignore non-modifying sigaction
    calls
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295885: GHA: Bump gcc versions 8313428: GHA: Bump GCC
    versions for July 2023 updates
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified
    agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315135: Memory leak in the native implementation of
    Pack200.Unpacker.unpack()
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315480: [11u] Harmonize GHA cross-compilation block with
    mainline
    + JDK-8315683: Parallelize java/util/concurrent/tck/
    /JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315766: Parallelize gc/stress/
    /TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315862: [11u] Backport 8227337: javax/management/remote/
    /mandatory/connection/ReconnectTest.java NoSuchObjectException
    no such object in table
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316380: [11u] Backport 8170089:
    nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't
    match for : Common-Cleaner
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/
    /SSLEngineTestCase.java to handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList
    java/rmi/registry/multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8323423: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322114, CVE-2024-21085, bsc#1222984: Improve Pack 200
    handling
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,
    the combobox popup does not appear.
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8058176: [mlvm] tests should not allow code cache
    exhaustion
    + JDK-8067651: LevelTransitionTest.java, fix trivial methods
    levels logic
    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005
    intermittently times out
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps
    timeouting
    + JDK-8166554: Avoid compilation blocking in
    OverloadCompileQueueTest.java
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8186610: move ModuleUtils to top-level testlibrary
    + JDK-8192864: defmeth tests can hide failures
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202282: [TESTBUG] appcds TestCommon
    .makeCommandLineForAppCDS() can be removed
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207211: [TESTBUG] Remove excessive output from
    CDS/AppCDS tests
    + JDK-8207214: Broken links in JDK API serialized-form page
    + JDK-8207855: Make applications/jcstress invoke tests in
    batches
    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/
    /TestDescription.java fails in jdk/hs nightly
    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java
    .findDeadlock.INDIFY_Test Deadlocked threads are not always
    detected
    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails
    in AUFS file system
    + JDK-8208699: remove unneeded imports from runtime tests
    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out
    often in hs-tier7 testing
    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option
    is not always required for appcds tests
    + JDK-8209549: remove VMPropsExt from TEST.ROOT
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8209946: [TESTBUG] CDS tests should use "@run driver"
    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java
    looks for libjsig in wrong location
    + JDK-8211978: Move  testlibrary/jdk/testlibrary/
    /SimpleSSLContext.java and testkeys to network testlibrary
    + JDK-8213622: Windows VS2013 build failure - "'snprintf':
    identifier not found"
    + JDK-8213926: WB_EnqueueInitializerForCompilation requests
    compilation for NULL
    + JDK-8213927: G1 ignores AlwaysPreTouch when
    UseTransparentHugePages is enabled
    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr
    modules
    + JDK-8214915: CtwRunner misses export for jdk.internal.access
    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws
    NullPointerException
    + JDK-8217475: Unexpected StackOverflowError in "process
    reaper" thread
    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest
    + JDK-8219475: javap man page needs to be updated
    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/
    /JMXInterfaceBindingTest.java passes trivially when it
    shouldn't
    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper
    .TestCaseImpl can't be defined in different runtime package as
    its nest host
    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils
    .areAllMountPointsAccessible needs to tolerate duplicates
    + JDK-8226706: (se) Reduce the number of outer loop iterations
    on Windows in java/nio/channels/Selector/RacyDeregister.java
    + JDK-8226905: unproblem list applications/ctw/modules/* tests
    on windows
    + JDK-8226910: make it possible to use jtreg's -match via
    run-test framework
    + JDK-8227438: [TESTLIB] Determine if file exists by
    Files.exists in function FileUtils.deleteFileIfExistsWithRetry
    + JDK-8231585: java/lang/management/ThreadMXBean/
    /MaxDepthForThreadInfoTest.java fails with
    java.lang.NullPointerException
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8233453: MLVM deoptimize stress test timed out
    + JDK-8234309: LFGarbageCollectedTest.java fails with parse
    Exception
    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8237777: "Dumping core ..." is shown despite claiming
    that "# No core dump will be written."
    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failing with LDAP response read timeout
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001
    failed due to "(IsSameObject#3) unexpected monitor object:
    0x000000562336DBA8"
    + JDK-8246222: Rename javac test T6395981.java to be more
    informative
    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code
    + JDK-8249087: Always initialize _body[0..1] in Symbol
    constructor
    + JDK-8251349: Add TestCaseImpl to
    OverloadCompileQueueTest.java's build dependencies
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8253543: sanity/client/SwingSet/src/
    /ButtonDemoScreenshotTest.java failed with "AssertionError:
    All pixels are not black"
    + JDK-8253739: java/awt/image/MultiResolutionImage/
    /MultiResolutionImageObserverTest.java fails
    + JDK-8253820: Save test images and dumps with timestamps from
    client sanity suite
    + JDK-8255277: randomDelay in DrainDeadlockT and
    LoggingDeadlock do not randomly delay
    + JDK-8255546: Missing coverage for
    javax.smartcardio.CardPermission and ResponseAPDU
    + JDK-8255743: Relax SIGFPE match in in
    runtime/ErrorHandling/SecondaryErrorTest.java
    + JDK-8257505: nsk/share/test/StressOptions stressTime is
    scaled in getter but not when printed
    + JDK-8259801: Enable XML Signature secure validation mode by
    default
    + JDK-8264135: UnsafeGetStableArrayElement should account for
    different JIT implementation details
    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/
    /Test.java fails with OOME due to CodeCache exhaustion.
    + JDK-8269025: jsig/Testjsig.java doesn't check exit code
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java
    doesn't check exit code
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java
    from problemlist.
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8289948: Improve test coverage for XPath functions: Node
    Set Functions
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used peak = NNNNNNN"
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed
    with "RuntimeException: Retrieved backing PlatformLogger level
    null is not the expected CONFIG"
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302149: Speed up
    compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler
    .compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314883:
    Java_java_util_prefs_FileSystemPreferences_lockFile0 write
    result errno in missing case
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8322178: Error. can't find jdk.testlibrary
    .SimpleSSLContext in test directory or libraries
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is
    failing assert
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
    /platform/docker/TestDockerMemoryMetrics.java always fail
    because OOM killed
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and
    newer (non-static data member initializers)
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for
    jni.cpp with dtrace enabled
    + JDK-8326503: [11u] java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fail because of
    package org.junit.jupiter.api does not exist
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329837: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23</changelog>
</package>
<package pkgid="49501301d67c9fb39a561514d79ce91d072b396e953e16e276fddaf9063a4dba" name="java-17-openjdk" arch="aarch64">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="45efb7fcf04183473b02fd933a1610b8ebb336d3e4a4fc1928caedfc6cd303b9" name="java-17-openjdk" arch="ppc64le">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="1aebaf21f90e5675d1ea3ee720becbc76b8c96b6c25f1590363b9999e05df5d8" name="java-17-openjdk" arch="s390x">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="7b53f2a98b6daf3f1ef70ba34a87de050ea84bb241eca190b32b40716bf36042" name="java-17-openjdk" arch="src">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="e60b2e027efad39787353911246f22e85d4c8c427c870cb0ab3f3758d9be2de7" name="java-17-openjdk" arch="x86_64">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="88e7cf196996c7ce6ee58801cad98abe681f92d64150b5b2469c99a5579e9149" name="java-17-openjdk-demo" arch="aarch64">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="21ea3d323549af3bd755897386ea4a75ebfc421ac5bb9e59f7599f2ab63f30f6" name="java-17-openjdk-demo" arch="ppc64le">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="a86b9b3461106f7de8ca892421b370bf92ce6fb0b39bf0fb68d42be03a166342" name="java-17-openjdk-demo" arch="s390x">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="3934c93ef49d24fb029b61baa8ecf6075e5b3dd757b022efd7d3ddfc402c7a78" name="java-17-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="ba312bf1b3fbf393e616d15b518939ddaa16d7676deae7d81107489f77ec9cab" name="java-17-openjdk-devel" arch="aarch64">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="7b4913dc7ad13797cf626aa4f661c4a28914114be48652cdd2a11cfe745476b2" name="java-17-openjdk-devel" arch="ppc64le">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="bf37d1dba9c7b06362a9e26bc05785ba3920251b9c04d9a7a0f4377f26f526bc" name="java-17-openjdk-devel" arch="s390x">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="c6909754eda75ea2d85bd83a59cfb9c79ff58b56fa59a5d15fe0da3e5dcde115" name="java-17-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="f81f49e5c5fd6afb4499597c1f61ab0a828ae1b33ed84f9bbdc17a4bf988efcd" name="java-17-openjdk-headless" arch="aarch64">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="07b7d7d7078213c5bd85ad6418e0d1f6755bc27527f6fd57f4bf3aa367cf2d8b" name="java-17-openjdk-headless" arch="ppc64le">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="6135354ca06bd45ff4faf8363befa53ed33aa2b4928e76d43587bee5aa34e550" name="java-17-openjdk-headless" arch="s390x">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="b48cc2ffab3301fa754829711f420cd23e1f4d0cfcadc4265ef81519373aa0fa" name="java-17-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="3439fdc5c90b74857242c4ec1feb69c6b991cb15261bbcecd30ebceb249bc298" name="java-17-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="d199d767bc583493dca3fabfe01140839ca05df038c52c410678260a173aca3e" name="java-17-openjdk-jmods" arch="aarch64">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="64a656689ecfffc9b32f5a04f74c23c4b6026744d0b8c2f65a3dbb2740fc7dae" name="java-17-openjdk-jmods" arch="ppc64le">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="2192613e0aee14b660797167d573b314b945c40f09dff4a2094f280cb05b6853" name="java-17-openjdk-jmods" arch="s390x">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="2580ab3e207b92d44c07496d09a4b9885357f754f32a12339069ff2bea510ea6" name="java-17-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="68f6b44335fc4cc632bebd4fd9480efe78e18355e3a774ecf5b53224cf66c16d" name="java-17-openjdk-src" arch="aarch64">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="f6a6630662334e1dc2055e9d0589965dce98a3bbeb2d56cf14b6bcf3844733bf" name="java-17-openjdk-src" arch="ppc64le">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Frame and automate
    + JDK-8286430: make test TEST="gtest:&lt;sometag&gt;" exits with
    error when it shouldn't
    + JDK-8286473: Drop --enable-preview from Record related tests
    + JDK-8286474: Drop --enable-preview from Sealed Classes
    related tests
    + JDK-8286475: Drop --enable-preview from instanceof pattern
    matching related tests
    + JDK-8286969: Add a new test library API to execute kinit in
    SecurityTools.java
    + JDK-8287596: Reorg jdk.test.lib.util.ForceGC
    + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times
    for negative case
    + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java
    causing test compilation error
    + JDK-8288325: [windows] Actual and Preferred Size of AWT
    Non-resizable frame are different
    + JDK-8288961: jpackage: test MSI installation fix
    + JDK-8288993: Make AwtFramePackTest generic by removing
    @requires tag
    + JDK-8289584: (fs) Print size values in java/nio/file/
    /FileStore/Basic.java when they differ by &gt; 1GiB
    + JDK-8289745: JfrStructCopyFailed uses heap words instead of
    bytes for object sizes
    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests
    failed with "isUsageThresholdExceeded() returned false, and is
    still false, while threshold = MMMMMMM and used
    peak = NNNNNNN"
    + JDK-8291154: Create a non static nested class without
    enclosing class throws VerifyError
    + JDK-8291550: RISC-V: jdk uses misaligned memory access when
    AvoidUnalignedAccess enabled
    + JDK-8291911: java/io/File/GetXSpace.java fails with
    "53687091200 != 161051996160"
    + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap
    shell tests to java version
    + JDK-8292072: NMT: repurpose Tracking overhead counter as
    global malloc counter
    + JDK-8292261: adjust timeouts in JLI
    GetObjectSizeIntrinsicsTest.java
    + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java
    fails with "ERROR: Shutting down connection: HTTP/2 client
    stopped"
    + JDK-8292636: (dc) Problem listing of java/nio/channels/
    /DatagramChannel/Unref.java has incorrect issue ID
    + JDK-8292717: Clean up checking of testing requirements in
    configure
    + JDK-8293156: Dcmd VM.classloaders fails to print the full
    hierarchy
    + JDK-8293335: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293343: sun/management/jmxremote/bootstrap/
    /RmiSslNoKeyStoreTest.java failed with "Agent communication
    error: java.io.EOFException"
    + JDK-8293563: [macos-aarch64] SA core file tests failing with
    sun.jvm.hotspot.oops.UnknownOopException
    + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/
    /UnicodeArgsTest.java fails on Japanese Windows platform
    + JDK-8294402: Add diagnostic logging to
    VMProps.checkDockerSupport
    + JDK-8294427: Check boxes and radio buttons have rendering
    issues on Windows in High DPI env
    + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi(
    /VirtualMachine/dispose/dispose003/TestDescription.java fails
    + JDK-8295229: Try to verify gtest version
    + JDK-8295424: adjust timeout for another JLI
    GetObjectSizeIntrinsicsTest.java subtest
    + JDK-8296275: Write a test to verify setAccelerator  method of
    JMenuItem
    + JDK-8296437: NMT incurs costs if disabled
    + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/
    /code/test/NativeCallTest.java fails after JDK-8262901
    + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on
    Linux ppc64le and Linux aarch64
    + JDK-8297296: java/awt/Mouse/EnterExitEvents/
    /DragWindowTest.java fails with "No MouseReleased event on
    label!"
    + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode
    + JDK-8297640: Increase buffer size for buf
    (insert_features_names) in
    Abstract_VM_Version::insert_features_names
    + JDK-8297798: Timeout with DTLSOverDatagram test template
    + JDK-8297958: NMT: Display peak values
    + JDK-8298298: NMT: count deltas are printed with 32-bit signed
    size
    + JDK-8298619: java/io/File/GetXSpace.java is failing
    + JDK-8298735: Some tools/jpackage/windows/* tests fails with
    jtreg test timeout
    + JDK-8298867: Basics.java fails with SSL handshake exception
    + JDK-8298868: Update EngineCloseOnAlert.java for changes to
    TLS implementation
    + JDK-8298869: Update ConnectionTest.java for changes to TLS
    implementation
    + JDK-8298872: Update CheckStatus.java for changes to TLS
    implementation
    + JDK-8298873: Update IllegalRecordVersion.java for changes to
    TLS implementation
    + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3
    + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java" fails because the frames of instruction
    does not display
    + JDK-8299075: TestStringDeduplicationInterned.java fails
    because extra deduplication
    + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/
    /DrawPrimitivesTest.java
    + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java
    generates unnecessary core file
    + JDK-8299255: Unexpected round errors in FreetypeFontScaler
    + JDK-8299677: Formatter.format might take a long time to
    format an integer or floating-point
    + JDK-8299748: java/util/zip/Deinflate.java failing on s390x
    + JDK-8300259: Add test coverage for processing of pending
    block files in signed JARs
    + JDK-8300272: Improve readability of the test
    JarWithOneNonDisabledDigestAlg
    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/
    /AwtListGarbageCollectionTest.java failed with "List wasn't
    garbage collected"
    + JDK-8300997: Add curl support to createJMHBundle.sh
    + JDK-8301065: Handle control characters in
    java_lang_String::print
    + JDK-8301189: validate-source fails after JDK-8298873
    + JDK-8301247: JPackage app-image exe launches multiple exe's
    in JDK 17+
    + JDK-8301377: adjust timeout for JLI
    GetObjectSizeIntrinsicsTest.java subtest again
    + JDK-8301455: comments in TestTypeAnnotations still refer to
    resolved JDK-8068737
    + JDK-8301457: Code in SendPortZero.java is uncommented even
    after JDK-8236852 was fixed
    + JDK-8301489: C1: ShortLoopOptimizer might lift instructions
    before their inputs
    + JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach
    the native thread
    + JDK-8301701: java/net/DatagramSocket/
    /DatagramSocketMulticasting.java should be hardened
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302109: Trivial fixes to btree tests
    + JDK-8302525: Write a test to check various components send
    Events while mouse and key are used simultaneously
    + JDK-8302607: increase timeout for
    ContinuousCallSiteTargetChange.java
    + JDK-8303607: SunMSCAPI provider leaks memory and keys
    + JDK-8303922: build-test-lib target is broken
    + JDK-8304174: Remove delays from httpserver tests
    + JDK-8304954: SegmentedCodeCache fails when using large pages
    + JDK-8305502: adjust timeouts in three more M&amp;M tests
    + JDK-8305505: NPE in javazic compiler
    + JDK-8305646: compile error on Alpine with gcc12 after 8298619
    in libGetXSpace.c
    + JDK-8306280: Open source several choice AWT tests
    + JDK-8307123: Fix deprecation warnings in DPrinter
    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing
    JTableHeader tests
    + JDK-8307403: java/util/zip/DeInflate.java timed out
    + JDK-8307732: build-test-lib is broken
    + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/
    /BasicCancelTest.java timed out and also had jcmd pipe errors
    + JDK-8308103: Massive (up to ~30x) increase in C2 compilation
    time since JDK 17
    + JDK-8308116: jdk.test.lib.compiler
    .InMemoryJavaCompiler.compile does not close files
    + JDK-8308223: failure handler missed jcmd.vm.info command
    + JDK-8308592: Framework for CA interoperability testing
    + JDK-8308593: Add KEEPALIVE Extended Socket Options Support
    for Windows
    + JDK-8308910: Allow executeAndLog to accept running process
    + JDK-8309032: jpackage does not work for module projects
    unless --module-path is specified
    + JDK-8309104: [JVMCI] compiler/unsafe/
    /UnsafeGetStableArrayElement test asserts wrong values with
    Graal
    + JDK-8309216: Cast from jchar* to char* in test
    java/io/GetXSpace.java
    + JDK-8309258: RISC-V: Add riscv_hwprobe syscall
    + JDK-8309502: RISC-V: String.indexOf intrinsic may produce
    misaligned memory loads
    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when
    using second test directory
    + JDK-8309974: some JVMCI tests fail when VM options include
  - XX:+EnableJVMCI
    + JDK-8310233: Fix THP detection on Linux
    + JDK-8310265: (process) jspawnhelper should not use argv[0]
    + JDK-8310268: RISC-V: misaligned memory access in
    String.Compare intrinsic
    + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
    + JDK-8310656: RISC-V: __builtin___clear_cache can fail
    silently.
    + JDK-8310687: JDK-8303215 is incomplete
    + JDK-8311511: Improve description of NativeLibrary JFR event
    + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java
    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java
    + JDK-8311592: ECKeySizeParameterSpec causes too many
    exceptions on third party providers
    + JDK-8311631: When multiple users run tools/jpackage/share/
    /LicenseTest.java, Permission denied for writing
    /var/tmp/*.files
    + JDK-8311813: C1: Uninitialized PhiResolver::_loop field
    + JDK-8312065: Socket.connect does not timeout when profiling
    + JDK-8312078: [PPC] JcmdScale.java Failing on AIX
    + JDK-8312126: NullPointerException in CertStore.getCRLs after
    8297955
    + JDK-8312182: THPs cause huge RSS due to thread start timing
    issue
    + JDK-8312394: [linux] SIGSEGV if kernel was built without
    hugepage support
    + JDK-8312395: Improve assertions in growableArray
    + JDK-8312440: assert(cast != nullptr) failed: must have added
    a cast to pin the node
    + JDK-8312467: relax the builddir check in
    make/autoconf/basic.m4
    + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default
    which is too low for JARs such as WhiteSource/Mend unified agent jar
    + JDK-8312535: MidiSystem.getSoundbank() throws unexpected
    SecurityException
    + JDK-8312573: Failure during CompileOnly parsing leads to
    ShouldNotReachHere
    + JDK-8312585: Rename DisableTHPStackMitigation flag to
    THPStackMitigation
    + JDK-8312592: New parentheses warnings after HarfBuzz 7.2.0
    update
    + JDK-8312612: handle WideCharToMultiByte return values
    + JDK-8312620: WSL Linux build crashes after JDK-8310233
    + JDK-8312625: Test serviceability/dcmd/vm/TrimLibcHeapTest.java
    failed: RSS use increased
    + JDK-8312909: C1 should not inline through interface calls
    with non-subtype receiver
    + JDK-8312974: Bump update version for OpenJDK: jdk-17.0.10
    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/
    /awt_Robot.cpp GetRGBPixels adjust releasing of resources
    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground
    release resources in early returns
    + JDK-8313322: RISC-V: implement MD5 intrinsic
    + JDK-8313626: C2 crash due to unexpected exception control flow
    + JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not
    close connections on SocketTimeoutErrors
    + JDK-8313691: use close after failing os::fdopen in vmError
    and ciEnv
    + JDK-8313779: RISC-V: use andn / orn in the MD5 instrinsic
    + JDK-8313781: Add regression tests for large page logging and
    user-facing error messages
    + JDK-8313782: Add user-facing warning if THPs are enabled but
    cannot be used
    + JDK-8313792: Verify 4th party information in
    src/jdk.internal.le/share/legal/jline.md
    + JDK-8314024: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work due to bad immediate
    dominator info
    + JDK-8314045: ArithmeticException in GaloisCounterMode
    + JDK-8314063: The socket is not closed in
    Connection::createSocket when the handshake failed for LDAP
    connection
    + JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on
    Windows when run as user with Administrator privileges
    + JDK-8314121: test tools/jpackage/share/
    /RuntimePackageTest.java#id0 fails on RHEL8
    + JDK-8314139: TEST_BUG: runtime/os/
    /THPsInThreadStackPreventionTest.java could fail on machine with
    large number of cores
    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to
    extra concurrent mark with -Xcomp
    + JDK-8314242: Update applications/scimark/Scimark.java to
    accept VM flags
    + JDK-8314263: Signed jars triggering Logger finder recursion
    and StackOverflowError
    + JDK-8314495: Update to use jtreg 7.3.1
    + JDK-8314679: SA fails to properly attach to JVM after having
    just detached from a different JVM
    + JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0
    write result errno in missing case
    + JDK-8315020: The macro definition for LoongArch64 zero build
    is not accurate.
    + JDK-8315062: [GHA] get-bootjdk action should return the
    abolute path
    + JDK-8315195: RISC-V: Update hwprobe query for new extensions
    + JDK-8315206: RISC-V: hwprobe query is_set return wrong value
    + JDK-8315214: Do not run sun/tools/jhsdb tests concurrently
    + JDK-8315377: C2: assert(u-&gt;find_out_with(Op_AddP) == nullptr)
    failed: more than 2 chained AddP nodes?
    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some
    cases
    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts
    path to devkit into libsplashscreen
    + JDK-8315549: CITime misreports code/total nmethod sizes
    + JDK-8315606: Open source few swing text/html tests
    + JDK-8315644: increase timeout of
    sun/security/tools/jarsigner/Warning.java
    + JDK-8315683: Parallelize
    java/util/concurrent/tck/JSR166TestCase.java
    + JDK-8315692: Parallelize
    gc/stress/TestStressRSetCoarsening.java test
    + JDK-8315696: SignedLoggerFinderTest.java test failed
    + JDK-8315751: RandomTestBsi1999 fails often with timeouts on
    Linux ppc64le
    + JDK-8315766: Parallelize
    gc/stress/TestStressIHOPMultiThread.java test
    + JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java
    should run with -XX:-VerifyDependencies
    + JDK-8315863: [GHA] Update checkout action to use v4
    + JDK-8315937: Enable parallelism in
    vmTestbase/nsk/stress/numeric tests
    + JDK-8316087: Test SignedLoggerFinderTest.java is still failing
    + JDK-8316178: Better diagnostic header for CodeBlobs
    + JDK-8316206: Test StretchedFontTest.java fails for Baekmuk
    font
    + JDK-8316461: Fix: make test outputs TEST SUCCESS after
    unsuccessful exit
    + JDK-8316514: Better diagnostic header for VtableStub
    + JDK-8316566: RISC-V: Zero extended narrow oop passed to
    Atomic::cmpxchg
    + JDK-8316645: RISC-V: Remove dependency on libatomic by adding
    cmpxchg 1b
    + JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java
    + JDK-8316743: RISC-V: Change UseVectorizedMismatchIntrinsic
    option result to warning
    + JDK-8316746: Top of lock-stack does not match the unlocked
    object
    + JDK-8316778: test hprof lib: invalid array element type from
    JavaValueArray.elementSize
    + JDK-8316859: RISC-V: Disable detection of V through HWCAP
    + JDK-8316906: Clarify TLABWasteTargetPercent flag
    + JDK-8317121: vector_masked_load instruction is moved too
    early after JDK-8286941
    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js
    + JDK-8317373: Add Telia Root CA v2
    + JDK-8317374: Add Let's Encrypt ISRG Root X2
    + JDK-8317705: ProblemList sun/tools/jstat/jstatLineCountsX.sh
    on linux-ppc64le and aix due to JDK-8248691
    + JDK-8317706: Exclude
    java/awt/Graphics2D/DrawString/RotTransText.java on linux
    + JDK-8317772: NMT: Make peak values available in release builds
    + JDK-8317834: java/lang/Thread/IsAlive.java timed out
    + JDK-8317920: JDWP-agent sends broken exception event with
    onthrow option
    + JDK-8317967: Enhance
    test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to
    handle default cases
    + JDK-8318669: Target OS detection in 'test-prebuilt' makefile
    target is incorrect when running on MSYS2
    + JDK-8318705: [macos] ProblemList java/rmi/registry/
    /multipleRegistries/MultipleRegistries.java
    + JDK-8318759: Add four DigiCert root certificates
    + JDK-8318855: Extra file added by mistake during the backport
    of JDK-8283326
    + JDK-8318889: C2: add bailout after assert Bad graph detected
    in build_loop_late
    + JDK-8318953: RISC-V: Small refactoring for
    MacroAssembler::test_bit
    + JDK-8319184: RISC-V: improve MD5 intrinsic
    + JDK-8319187: Add three eMudhra emSign roots
    + JDK-8319525: RISC-V: Rename *_riscv64.ad files to *_riscv.ad
    under riscv/gc
    + JDK-8319958: test/jdk/java/io/File/libGetXSpace.c does not
    compile on Windows 32-bit
    + JDK-8320053: GHA: Cross-compile gtest code
    + JDK-8320209: VectorMaskGen clobbers rflags on x86_64
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320601: ProblemList java/lang/invoke/lambda/
    /LambdaFileEncodingSerialization.java on linux-all
    + JDK-8323422: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.10
- Modified patch:
  * fips.patch
    + regenerate to fix one file with substantial changes</changelog>
  <changelog author="fstrba@suse.com" date="1707307200">- Recommend mozilla-nss-sysinit in order to have available the
  /etc/pki/nssdb directory and its content, required in fips mode
  (bsc#1219662)
- Do not install our crafted nss.fips.cfg file, but use the one that
  the build produces with our fips.patch applied
- Removed patch:
  * nss-security-provider.patch
    + this DISABLED nss security provider was not used for years and
    is largely rendered obsolete by the NSS-FIPS provider
- Modified patch:
  * fips.patch
    + adapt to the removal of the nss security provider</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
  * Security fixes
    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
    client usage
    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
    compilation fails with "Exceeded _node_regs array"
    + JDK-8318340: Improve RSA key implementations
    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
    logging
    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
    of addresses
  * Other changes
    + JDK-6928542: Chinese characters in RTF are not decoded
    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
    /bug4517214.java fails on MacOS
    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
    combobox popup does not appear.
    + JDK-7167356: (javac) investigate failing tests in
    JavacParserTest
    + JDK-8054022: HttpURLConnection timeouts with Expect:
    100-Continue and no chunking
    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
    + JDK-8169475: WheelModifier.java fails by timeout
    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
    accesses `int InetAddress.preferIPv6Address` as a boolean
    + JDK-8209595: MonitorVmStartTerminate.java timed out
    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
    plain java tests
    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
    + JDK-8263256: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails due to dynamic
    reconfigurations of network interface during test
    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
    failed with connection timeout
    + JDK-8271118: C2: StressGCM should have higher priority than
    frequency-based policy
    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
    contains info on final result
    + JDK-8272811: Document the effects of building with
    _GNU_SOURCE in os_posix.hpp
    + JDK-8272853: improve `JavadocTester.runTests`
    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
    + JDK-8274060: C2: Incorrect computation after JDK-8273454
    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
    fails in Windows 11
    + JDK-8274621: NullPointerException because listenAddress[0] is
    null
    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
    claiming
    + JDK-8274634: Use String.equals instead of String.compareTo in
    java.desktop
    + JDK-8276125: RunThese24H.java SIGSEGV in
    JfrThreadGroup::thread_group_id
    + JDK-8278028: [test-library] Warnings cleanup of the test
    library
    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
    localhost IP addresses
    + JDK-8278363: Create extented container test groups
    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
    IPv6 only Windows env
    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
    /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
    problemlist.
    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
    JRadioButton value change
    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
    + JDK-8283994: Make Xerces DatatypeException stackless
    + JDK-8286312: Stop mixing signed and unsigned types in bit
    operations
    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on mac aarch64
    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
    failed with "Expected two batches of Active Setting events"
    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
    a partially disabled state
    + JDK-8288846: misc tests fail "assert(ms &lt; 1000) failed:
    Un-interruptable sleep, short time use only"
    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
    Java heap space: failed reallocation of scalar replaced
    objects"
    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
    /capability/CM03/cm03t001/TestDescription.java on linux-all
    + JDK-8290399: [macos] Aqua LAF does not fire an action event
    if combo box menu is displayed
    + JDK-8292458: Atomic operations on scoped enums don't build
    with clang
    + JDK-8292946: GC lock/jni/jnilock001 test failed
    "assert(gch-&gt;gc_cause() == GCCause::_scavenge_alot ||
    !gch-&gt;incremental_collection_failed()) failed: Twice in a row"
    + JDK-8293117: Add atomic bitset functions
    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
    atomics
    + JDK-8294158: HTML formatting for PassFailJFrame instructions
    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java failure
    + JDK-8294535: Add screen capture functionality to
    PassFailJFrame
    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
    + JDK-8295124: Atomic::add to pointer type may return wrong
    value
    + JDK-8295274: HelidonAppTest.java fails
    "assert(event-&gt;should_commit()) failed: invariant" from
    compiled frame"
    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
    + JDK-8297968: Crash in PrintOptoAssembly
    + JDK-8298087: XML Schema Validation reports an required
    attribute twice via ErrorHandler
    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
    failed: ExceptionInInitializerError: target class not found
    + JDK-8300269: The selected item in an editable JComboBox with
    titled border is not visible in Aqua LAF
    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
    crash
    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
    after JDK-8301306
    + JDK-8301846: Invalid TargetDataLine after screen lock when
    using JFileChooser or COM library
    + JDK-8302017: Allocate BadPaddingException only if it will be
    thrown
    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
    /TestAMEnotNPE.java
    + JDK-8303605: Memory leaks in Metaspace gtests
    + JDK-8304074: [JMX] Add an approximation of total bytes
    allocated on the Java heap by the JVM
    + JDK-8304696: Duplicate class names in dynamicArchive tests
    can lead to test failure
    + JDK-8305356: Fix ignored bad CompileCommands in tests
    + JDK-8305900: Use loopback IP addresses in security policy
    files of httpclient tests
    + JDK-8305906: HttpClient may use incorrect key when finding
    pooled HTTP/2 connection for IPv6 address
    + JDK-8305962: update jcstress to 0.16
    + JDK-8305972: Update XML Security for Java to 3.0.2
    + JDK-8306014: Update javax.net.ssl TLS tests to use
    SSLContextTemplate or SSLEngineTemplate
    + JDK-8306408: Fix the format of several tables in building.md
    + JDK-8307185: pkcs11 native libraries make JNI calls into java
    code while holding GC lock
    + JDK-8307926: Support byte-sized atomic bitset operations
    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
    PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
    + JDK-8307990: jspawnhelper must close its writing side of a
    pipe before reading from it
    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
    while allocating
    + JDK-8308245: Add -proc:full to describe current default
    annotation processing policy
    + JDK-8308336: Test java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java failed:
    java.net.BindException: Address already in use
    + JDK-8309302: java/net/Socket/Timeouts.java fails with
    AssertionError on test temporal post condition
    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
    /BlockedAsyncClose.java fails with jtreg test timeout
    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
    /agentthr001/TestDescription.java crashing due to empty while
    loop
    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
    announcements of JRadioButton
    + JDK-8309870: Using -proc:full should be considered requesting
    explicit annotation processing
    + JDK-8310106: sun.security.ssl.SSLHandshake
    .getHandshakeProducer() incorrectly checks handshakeConsumers
    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
    /bug6889007.java fails
    + JDK-8310380: Handle problems in core-related tests on macOS
    when codesign tool does not work
    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
    spuriously passing
    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
    timed out
    + JDK-8310838: Correct range notations in MethodTypeDesc
    specification
    + JDK-8310844: [AArch64] C1 compilation fails because monitor
    offset in OSR buffer is too large for immediate
    + JDK-8310923: Refactor Currency tests to use JUnit
    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
    Windows platform
    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
    announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
    JDK-8307990
    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
    ShenandoahGC
    + JDK-8312428: PKCS11 tests fail with NSS 3.91
    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
    "can't seal package nu.xom"
    + JDK-8313081: MonitoringSupport_lock should be unconditionally
    initialized after 8304074
    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
    makefiles
    + JDK-8313206: PKCS11 tests silently skip execution
    + JDK-8313575: Refactor PKCS11Test tests
    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
    /TestFloatingDecimal should use RandomFactory
    + JDK-8313643: Update HarfBuzz to 8.2.2
    + JDK-8313816: Accessing jmethodID might lead to spurious
    crashes
    + JDK-8314164: java/net/HttpURLConnection/
    /HttpURLConnectionExpectContinueTest.java fails intermittently
    in timeout
    + JDK-8314220: Configurable InlineCacheBuffer size
    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
    flags
    + JDK-8315034: File.mkdirs() occasionally fails to create
    folders on Windows shared folder
    + JDK-8315042: NPE in PKCS7.parseOldSignedData
    + JDK-8315594: Open source few headless Swing misc tests
    + JDK-8315600: Open source few more headless Swing misc tests
    + JDK-8315602: Open source swing security manager test
    + JDK-8315611: Open source swing text/html and tree test
    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
    run with -Xbatch
    + JDK-8315731: Open source several Swing Text related tests
    + JDK-8315761: Open source few swing JList and JMenuBar tests
    + JDK-8315920: C2: "control input must dominate current
    control" assert failure
    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
    /bug4654927.java: component must be showing on the screen to
    determine its location
    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
    createTestJvm
    + JDK-8316028: Update FreeType to 2.13.2
    + JDK-8316030: Update Libpng to 1.6.40
    + JDK-8316106: Open source few swing JInternalFrame and
    JMenuBar tests
    + JDK-8316304: (fs) Add support for BasicFileAttributes
    .creationTime() for Linux
    + JDK-8316392: compiler/interpreter/
    /TestVerifyStackAfterDeopt.java failed with SIGBUS in
    PcDescContainer::find_pc_desc_internal
    + JDK-8316414: C2: large byte array clone triggers "failed:
    malformed control flow" assertion failure on linux-x86
    + JDK-8316415: Parallelize
    sun/security/rsa/SignedObjectChain.java subtests
    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
    get OOM killed with Parallel GC
    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
    /CheckOrigin.java as vm.flagless
    + JDK-8316679: C2 SuperWord: wrong result, load should not be
    moved before store if not comparable
    + JDK-8316693: Simplify at-requires checkDockerSupport()
    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
    GC need to cleanup old OopMapCache entries
    + JDK-8316947: Write a test to check textArea triggers
    MouseEntered/MouseExited events properly
    + JDK-8317039: Enable specifying the JDK used to run jtreg
    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java on Linux ppc64le
    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails with ConnectException:
    Connection timed out: no further information
    + JDK-8317603: Improve exception messages thrown by
    sun.nio.ch.Net native methods (win)
    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
    freezes the application in macOS 14 Sonoma
    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
    JDK-8317039
    + JDK-8317960: [17u] Excessive CPU usage on
    AbstractQueuedSynchronized.isEnqueued
    + JDK-8318154: Improve stability of WheelModifier.java test
    + JDK-8318183: C2: VM may crash after hitting node limit
    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
    /BootClassPathTest.sh fails on Japanese Windows
    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
    with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
    + JDK-8318490: Increase timeout for JDK tests that are close to
    the limit when run with libgraal
    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
    tests
    + JDK-8318608: Enable parallelism in
    vmTestbase/nsk/stress/threads tests
    + JDK-8318689: jtreg is confused when folder name is the same
    as the test name
    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
    "transport error 202: bind failed: Address already in use"
    + JDK-8318951: Additional negative value check in JPEG decoding
    + JDK-8318955: Add ReleaseIntArrayElements in
    Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
    early return
    + JDK-8318957: Enhance agentlib:jdwp help output by info about
    allow option
    + JDK-8318961: increase javacserver connection timeout values
    and max retry attempts
    + JDK-8318971: Better Error Handling for Jar Tool When
    Processing Non-existent Files
    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
    + JDK-8319124: Update XML Security for Java to 3.0.3
    + JDK-8319213: Compatibility.java reads both stdout and stderr
    of JdkUtils
    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
    null and interface not visible from class loader
    + JDK-8319456: jdk/jfr/event/gc/collection/
    /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
    Initiated GC' not in the valid causes
    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
    + JDK-8320001: javac crashes while adding type annotations to
    the return type of a constructor
    + JDK-8320168: handle setsocktopt return values
    + JDK-8320208: Update Public Suffix List to b5bf572
    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
    wrong, missed optimization opportunity
    + JDK-8320597: RSA signature verification fails on signed data
    that does not encode params correctly
    + JDK-8320798: Console read line with zero out should zero out
    underlying buffer
    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
    + JDK-8320937: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8321151: JDK-8294427 breaks Windows L&amp;F on all older
    Windows versions
    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
    addressing mode
    + JDK-8321408: Add Certainly roots R1 and E1
    + JDK-8321480: ISO 4217 Amendment 176 Update
    + JDK-8321599: Data loss in AVX3 Base64 decoding
    + JDK-8321815: Shenandoah: gc state should be synchronized to
    java threads only once per safepoint
    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
    timeout on linux-riscv64 platform
    + JDK-8322098: os::Linux::print_system_memory_info enhance the
    THP output with
    /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
    + JDK-8322417: Console read line with zero out should zero out
    when throwing exception
    + JDK-8322583: RISC-V: Enable fast class initialization checks
    + JDK-8322725: (tz) Update Timezone Data to 2023d
    + JDK-8322750: Test "api/java_awt/interactive/
    /SystemTrayTests.html" failed because A blue ball icon is
    added outside of the system tray
    + JDK-8322772: Clean up code after JDK-8322417
    + JDK-8322783: prioritize /etc/os-release over
    /etc/SuSE-release in hs_err/info output
    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
    + JDK-8323008: filter out harmful -std* flags added by autoconf
    from CXX
    + JDK-8323021: Shenandoah: Encountered reference count always
    attributed to first worker thread
    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
    during evacuation
    + JDK-8323243: JNI invocation of an abstract instance method
    corrupts the stack
    + JDK-8323331: fix typo hpage_pdm_size
    + JDK-8323428: Shenandoah: Unused memory in regions compacted
    during a full GC should be mangled
    + JDK-8323515: Create test alias "all" for all test roots
    + JDK-8323637: Capture hotspot replay files in GHA
    + JDK-8323640: [TESTBUG]testMemoryFailCount in
    jdk/internal/platform/docker/TestDockerMemoryMetrics.java
    always fail because OOM killed
    + JDK-8323806: [17u] VS2017 build fails with warning after
    8293117.
    + JDK-8324184: Windows VS2010 build failed with "error C2275:
    'int64_t'"
    + JDK-8324280: RISC-V: Incorrect implementation in
    VM_Version::parse_satp_mode
    + JDK-8324347: Enable "maybe-uninitialized" warning for
    FreeType 2.13.1
    + JDK-8324514: ClassLoaderData::print_on should print address
    of class loader
    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
    + JDK-8324659: GHA: Generic jtreg errors are not reported
    + JDK-8324937: GHA: Avoid multiple test suites per job
    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
    /AKISerialNumber.java is failing
    + JDK-8325150: (tz) Update Timezone Data to 2024a
    + JDK-8325585: Remove no longer necessary calls to
    set/unset-in-asgct flag in JDK 17
    + JDK-8326000: Remove obsolete comments for class
    sun.security.ssl.SunJSSE
    + JDK-8327036: [macosx-aarch64] SIGBUS in
    MarkActivationClosure::do_code_blob reached from
    Unsafe_CopySwapMemory0
    + JDK-8327391: Add SipHash attribution file
    + JDK-8329836: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11</changelog>
</package>
<package pkgid="116eb5205ceb2e77aca90914a5929208f8c8eecfede0b972c5a1c929658bd0af" name="java-17-openjdk-src" arch="s390x">
  <version epoch="0" ver="17.0.11.0" rel="150400.3.42.1"/>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
  <changelog author="fstrba@suse.com" date="1691150400">- Added patch:
  * reproducible-javadoc-timestamp.patch
    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
    generation more reproducible</changelog>
  <changelog author="fstrba@suse.com" date="1692792000">- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
  release fixing a regression in July 2023 CPU)
  * Changes:
    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)
    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1</changelog>
  <changelog author="fstrba@suse.com" date="1694692800">- Added patch:
  * reproducible-properties.patch
    + use SOURCE_DATE_EPOCH for timestamp in the generated
    properties files</changelog>
  <changelog author="fstrba@suse.com" date="1697630400">- Compiler flags to realign stack on ix86 (bsc#1214790)</changelog>
  <changelog author="schwab@suse.de" date="1697630401">- Enable JIT on riscv64</changelog>
  <changelog author="fstrba@suse.com" date="1697716800">- Update to upstream tag jdk-17.0.9+9 (October 2023 CPU)
  * Security fixes
    + JDK-8286503, JDK-8312367: Enhance security classes
    + JDK-8296581: Better system proxy support
    + JDK-8297856: Improve handling of Bidi characters
    + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
    + JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
    + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS
    connections
    + JDK-8312248: Enhanced archival support redux
    + JDK-8314649: Enhanced archival support redux
    + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load
    instruction is moved too early after JDK-8286941
  * New features
    + JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
  * Other changes
    + JDK-6176679: Application freezes when copying an animated gif
    image to the system clipboard
    + JDK-6381945: (cal) Japanese calendar unit test system should
    avoid multiple static imports
    + JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on
    calling isCollectionUsageThresholdExceeded()
    + JDK-8153837: AArch64: Handle special cases for MaxINode &amp;
    MinINode
    + JDK-8156889: ListKeychainStore.sh fails in some virtualized
    environments
    + JDK-8171221: Remove -XX:+CheckMemoryInitialization
    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh
    to Java Jtreg Test
    + JDK-8195589: T6587786.java failed after JDK-8189997
    + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
    + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java
    fails on Windows
    + JDK-8229147: Linux os::create_thread() overcounts guardpage
    size with newer glibc (&gt;=2.27)
    + JDK-8252713: jtreg time out of CtrlASCII.java seems to hang
    the Xserver.
    + JDK-8255548: Missing coverage for
    javax.xml.crypto.dom.DOMCryptoContext
    + JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
    + JDK-8267188: gc/stringdedup/
    /TestStringDeduplicationInterned.java fails with Shenandoah
    + JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2,
    true) failure
    + JDK-8267517: async logging for stdout and stderr
    + JDK-8267860: Off-by-one bug when searching arrays in
    AlpnGreaseTest
    + JDK-8268852: AsyncLogWriter should not overide
    is_Named_thread()
    + JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java
    failed with ArrayIndexOutOfBoundsException: Array index out of
    range: -4
    + JDK-8269466: Factor out the common code for initializing and
    starting internal VM JavaThreads
    + JDK-8270331: [TESTBUG] Error: Not a test or directory
    containing tests: java/awt/print/PrinterJob/InitToBlack.java
    + JDK-8270794: Avoid loading Klass* twice in
    TypeArrayKlass::oop_size()
    + JDK-8270894: Use acquire semantics in
    ObjectSynchronizer::read_stable_mark()
    + JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
    + JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
    + JDK-8272586: emit abstract machine code in hs-err logs
    + JDK-8272654: Mark word accesses should not use Access API
    + JDK-8273092: Sort classlist in JDK image
    + JDK-8273803: Zero: Handle "zero" variant in
    CommandLineOptionTest.java
    + JDK-8274986: max code printed in hs-err logs should be
    configurable
    + JDK-8275031: runtime/ErrorHandling/
    /MachCodeFramesInErrorFile.java fails when hsdis is present
    + JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java
    fails with D3D basic render driver
    + JDK-8275415: Prepare Leak Profiler for Lilliput
    + JDK-8275662: remove test/lib/sun/hotspot
    + JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java
    failed "assert(!contains(edge-&gt;reference())) failed:
    invariant"
    + JDK-8276651: java/lang/ProcessHandle tests fail with
    "RuntimeException: Input/output error" in
    java.lang.ProcessHandleImpl$Info.info0
    + JDK-8276696: ParallelObjectIterator freed at the wrong time
    in VM_HeapDumper
    + JDK-8277102: Dubious PrintCompilation output
    + JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java
    test times out
    + JDK-8277417: C1 LIR instruction for load-klass
    + JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
    + JDK-8277654: Shenandoah: Don't produce new memory state in C2
    LRB runtime call
    + JDK-8277860: PPC: Remove duplicate info != NULL check
    + JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the
    same name from LIR_Op
    + JDK-8278456: Define jtreg jdk_desktop test group time-based
    sub-tasks for use by headful testing.
    + JDK-8279545: Buffer overrun in reverse_words of
    sharedRuntime_x86_64.cpp:3517
    + JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
    + JDK-8280396: G1: Full gc mark stack draining should prefer to
    make work available to other threads
    + JDK-8280885: Shenandoah: Some tests failed with "EA: missing
    allocation reference path"
    + JDK-8281507: Two javac tests have bad jtreg `@clean` tags
    + JDK-8281717: Cover logout method for several LoginModule
    + JDK-8282404: DrawStringWithInfiniteXform.java failed with
    "RuntimeException: drawString with InfiniteXform transform
    takes long time"
    + JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails
    intermittently with exit code 97
    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless
    recursion with RuntimeException in void ck(double x, double y)
    + JDK-8283056: show abstract machine code in hs-err for all VM
    crashes
    + JDK-8283276: java/io/ObjectStreamClass/
    /ObjectStreamClassCaching.java fails with various GCs
    + JDK-8283326: Implement SafeFetch statically
    + JDK-8283724: Incorrect description for jtreg-failure-handler
    option
    + JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream
    should only check inflated bytes
    + JDK-8283865: riscv: Break down -XX:+UseRVB into seperate
    options for each bitmanip extension
    + JDK-8283929: GHA: Add RISC-V build config
    + JDK-8284068: riscv: should call Atomic::release_store in
    JavaThread::set_thread_state
    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java
    fails to compile
    + JDK-8284273: Early crashes in os::print_context on AArch64
    + JDK-8284760: Correct type/array element offset in
    LibraryCallKit::get_state_from_digest_object()
    + JDK-8284772: GHA: Use GCC Major Version Dependencies Only
    + JDK-8284910: Buffer clean in PasswordCallback
    + JDK-8284937: riscv: should not allocate special register for
    temp
    + JDK-8284997: arm32 build crashes since JDK-8283326
    + JDK-8285303: riscv: Incorrect register mask in
    call_native_base
    + JDK-8285437: riscv: Fix MachNode size mismatch for
    MacroAssembler::verify_oops*
    + JDK-8285630: Fix a configure error in RISC-V cross build
    + JDK-8285675: Temporary fix for arm32 SafeFetch
    + JDK-8285699: riscv: Provide information when hitting a
    HaltNode
    + JDK-8285711: riscv: RVC: Support disassembler show-bytes
    option
    + JDK-8285756: clean up use of bad arguments for `@clean` in
    langtools tests
    + JDK-8285980: Several tests in compiler/c2/irTests miss
    @requires vm.compiler2.enabled
    + JDK-8286481: Exception printed to stdout on Windows when
    storing transparent image in clipboard
    + JDK-8286620: Create regression test for verifying setMargin()
    of JRadioButton
    + JDK-8286623: Bundle zlib by default with JDK on macos aarch64
    + JDK-8287227: Shenandoah: A couple of virtual thread tests
    failed with iu mode even without Loom enabled.
    + JDK-8287418: riscv: Fix correctness issue of
    MacroAssembler::movptr
    + JDK-8287552: riscv: Fix comment typo in li64
    + JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
    + JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes
    random crashes
    + JDK-8289077: Add manual tests to open
    + JDK-8289238: Refactoring changes to PassFailJFrame Test
    Framework
    + JDK-8289510: Improve test coverage for XPath Axes: namespace
    + JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
    + JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
    + JDK-8289646: configure script failed on WSL
    + JDK-8289688: jfr command hangs when it processes invalid file
    + JDK-8289748: C2 compiled code crashes with SIGFPE with
  - XX:+StressLCM and -XX:+StressGCM
    + JDK-8289797: tools/launcher/I18NArgTest.java fails on
    Japanese Windows environment
    + JDK-8289917: Metadata for regionsRefilled of
    G1EvacuationStatistics event is wrong
    + JDK-8290137: riscv: small refactoring for add_memory_int32/64
    + JDK-8290164: compiler/runtime/TestConstantsInError.java fails
    on riscv
    + JDK-8290464: Optimize ResourceArea zapping on ResourceMark
    release
    + JDK-8290469: Add new positioning options to PassFailJFrame
    test framework
    + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
    + JDK-8291444: GHA builds/tests won't run manually if disabled
    from automatic running
    + JDK-8291830: jvmti/RedefineClasses/StressRedefine failed:
    assert(!is_null(v)) failed: narrow klass value can never be zero
    + JDK-8291893: riscv: remove fence.i used in user space
    + JDK-8291947: riscv: fail to build after JDK-8290840
    + JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup
    required permissions for jtreg version 7 jar
    + JDK-8292315: Tests should not rely on specific JAR file names
    (hotspot)
    + JDK-8292316: Tests should not rely on specific JAR file names
    (jpackage)
    + JDK-8292683: Remove BadKeyUsageTest.java from Problem List
    + JDK-8292698: Improve performance of DataInputStream
    + JDK-8292716: Configure should check that jtreg is of the
    required version
    + JDK-8292763: JDK-8292716 breaks configure without jtreg
    + JDK-8292867: RISC-V: Simplify weak CAS return value handling
    + JDK-8293012: ConstantPool::print_on can crash if _cache is
    NULL
    + JDK-8293050: RISC-V: Remove redundant non-null assertions
    about macro-assembler
    + JDK-8293098: GHA: Harmonize GCC version handling for host and
    cross builds
    + JDK-8293100: RISC-V: Need to save and restore callee-saved
    FloatRegisters in StubGenerator::generate_call_stub
    + JDK-8293107: GHA: Bump to Ubuntu 22.04
    + JDK-8293114: JVM should trim the native heap
    + JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux
    ppc64le and Linux aarch64
    + JDK-8293177: Verify version numbers in legal files
    + JDK-8293180: JQuery UI license file not updated
    + JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests
    crash with aggressive heuristics
    + JDK-8293361: GHA: dump config.log in case of configure failure
    + JDK-8293474: RISC-V: Unify the way of moving function pointer
    + JDK-8293524: RISC-V: Use macro-assembler functions as
    appropriate
    + JDK-8293566: RISC-V: Clean up push and pop registers
    + JDK-8293811: Provide a reason for PassFailJFrame.forceFail
    + JDK-8293851: hs_err should print more stack in hex dump
    + JDK-8294012: RISC-V: get/put_native_u8 missing the case when
    address&amp;7 is 6
    + JDK-8294083: RISC-V: Minimal build failed with
  - -disable-precompiled-headers
    + JDK-8294086: RISC-V: Cleanup InstructionMark usages in the
    backend
    + JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and
    add more alignment assertions for the patchable calls/nops
    + JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
    + JDK-8294187: RISC-V: Unify all relocations for the backend
    into AbstractAssembler::relocate()
    + JDK-8294366: RISC-V: Partially mark out incompressible regions
    + JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
    + JDK-8294492: RISC-V: Use li instead of patchable movptr at
    non-patchable callsites
    + JDK-8294679: RISC-V: Misc crash dump improvements
    + JDK-8294941: GHA: Cut down cross-compilation sysroots
    + JDK-8294956: GHA: qemu-debootstrap is deprecated, use the
    regular one
    + JDK-8295110: RISC-V: Mark out relocations as incompressible
    + JDK-8295213: Run GHA manually with user-specified make and
    configure arguments
    + JDK-8295270: RISC-V: Clean up and refactoring for assembler
    functions
    + JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
    + JDK-8295657: SA: Allow larger object alignments
    + JDK-8295737: macOS: Print content cut off when width &gt; height
    with portrait orientation
    + JDK-8295811: serviceability/sa/TestObjectAlignment.java fails
    on x86_32
    + JDK-8295812: Skip the "half float" support in LittleCMS
    during the build
    + JDK-8295894: Remove SECOM certificate that is expiring in
    September 2023
    + JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
    + JDK-8295968: RISC-V: Rename some assembler intrinsic
    functions for RVV 1.0
    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/
    /AbstractDrbg/SpecTest.java intermittently timeout
    + JDK-8296435: RISC-V: Small refactoring for increment/decrement
    + JDK-8296447: RISC-V: Make the operands order of
    vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
    + JDK-8296448: RISC-V: Fix temp usages of heapbase register
    killed by MacroAssembler::en/decode_klass_not_null
    + JDK-8296602: RISC-V: improve performance of copy_memory stub
    + JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
    + JDK-8296796: Provide clean, platform-agnostic interface to
    C-heap trimming
    + JDK-8296916: RISC-V: Move some small macro-assembler
    functions to header file
    + JDK-8297350: Update JMH devkit to 1.36
    + JDK-8297359: RISC-V: improve performance of floating Max Min
    intrinsics
    + JDK-8297476: Increase InlineSmallCode default from 1000 to
    2500 for RISC-V
    + JDK-8297644: RISC-V: Compilation error when shenandoah is
    disabled
    + JDK-8297681: Unnecessary color conversion during
    4BYTE_ABGR_PRE to INT_ARGB_PRE blit
    + JDK-8297697: RISC-V: Add support for SATP mode detection
    + JDK-8297715: RISC-V: C2: Use single-bit instructions from the
    Zbs extension
    + JDK-8297887: Update Siphash
    + JDK-8297923: java.awt.ScrollPane broken after multiple scroll
    up/down
    + JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index
    (512) overflow for value (    1.00)"
    + JDK-8298921: Create a regression test for JDK-8139581
    + JDK-8298974: Add ftcolor.c to imported freetype sources
    + JDK-8299158: Improve MD5 intrinsic on AArch64
    + JDK-8299168: RISC-V: Fix MachNode size mismatch for
    MacroAssembler::_verify_oops*
    + JDK-8299330: Minor improvements in MSYS2 Workflow handling
    + JDK-8299617: CurrencySymbols.properties is missing the
    copyright notice
    + JDK-8299658: C1 compilation crashes in
    LinearScan::resolve_exception_edge
    + JDK-8299713: Test javax/swing/JTableHeader/6889007/
    /bug6889007.java failed: Wrong type of cursor
    + JDK-8299827: Add resolved IP address in connection exception
    for sockets
    + JDK-8299847: RISC-V: Improve PrintOptoAssembly output of
    CMoveI/L nodes
    + JDK-8299962: Speed up compiler/intrinsics/unsafe/
    /DirectByteBufferTest.java and HeapByteBufferTest.java
    + JDK-8300053: Shenandoah: Handle more GCCauses in
    ShenandoahControlThread::request_gc
    + JDK-8300098: java/util/concurrent/ConcurrentHashMap/
    /ConcurrentAssociateTest.java fails with internal timeout when
    executed with TieredCompilation1/3
    + JDK-8300109: RISC-V: Improve code generation for MinI/MaxI
    nodes
    + JDK-8300405: Screen capture for test
    JFileChooserSetLocationTest.java, failure case
    + JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
    + JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api
    for host values
    + JDK-8300693: Lower the compile threshold and reduce the
    iterations of warmup loop in VarHandles tests
    + JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes
    for Zbb
    + JDK-8301036: RISC-V: Factor out functions baseOffset &amp;
    baseOffset32 from MacroAssembler
    + JDK-8301067: RISC-V: better error message when reporting
    unsupported satp modes
    + JDK-8301074: Replace NULL with nullptr in share/opto/
    + JDK-8301097: Update GHA XCode to 12.5.1
    + JDK-8301153: RISC-V: pipeline class for several instructions
    is not set correctly
    + JDK-8301167: Update VerifySignedJar to actually exercise and
    test verification
    + JDK-8301187: Memory leaks in OopMapCache
    + JDK-8301269: Update Commons BCEL to Version 6.7.0
    + JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file
    due to missing match rule
    + JDK-8301367: Add exception handler method to the
    BaseLdapServer
    + JDK-8301628: RISC-V: c2 fix pipeline class for several
    instructions
    + JDK-8301700: Increase the default TLS Diffie-Hellman group
    size from 1024-bit to 2048-bit
    + JDK-8301818: RISC-V: Factor out function mvw from
    MacroAssembler
    + JDK-8301852: RISC-V: Optimize class atomic when order is
    memory_order_relaxed
    + JDK-8301959: Compile command in
    compiler.loopopts.TestRemoveEmptyCountedLoop does not work
    + JDK-8302114: RISC-V: Several foreign jtreg tests fail with
    debug build after JDK-8301818
    + JDK-8302150: Speed up compiler/codegen/Test7100757.java
    + JDK-8302161: Upgrade jQuery UI to version 1.13.2
    + JDK-8302182: Update Public Suffix List to 88467c9
    + JDK-8302289: RISC-V: Use bgez instruction in
    arraycopy_simple_check when possible
    + JDK-8302736: Major performance regression in Math.log on
    aarch64
    + JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
    + JDK-8303047: avoid NULL after 8301661
    + JDK-8303154: Investigate and improve instruction cache
    flushing during compilation
    + JDK-8303215: Make thread stacks not use huge pages
    + JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN
    split if
    + JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic
    support for C1
    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
    + JDK-8304353: Add lib-test tier1 testing in GHA
    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
    + JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix
    incomplete license wording
    + JDK-8304976: Optimize
    DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
    + JDK-8305006: Use correct register in riscv_enc_fast_unlock()
    + JDK-8305008: RISC-V: Factor out immediate checking functions
    from assembler_riscv.inline.hpp
    + JDK-8305112: RISC-V: Typo fix for RVC description
    + JDK-8305236: Some LoadLoad barriers in the interpreter are
    unnecessary after JDK-8220051
    + JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
    + JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
    + JDK-8305512: RISC-V: Enable RVC extension by default on
    supported hardware
    + JDK-8305670: Performance regression in LockSupport.unpark
    with lots of idle threads
    + JDK-8305728: RISC-V: Use bexti instruction to do single-bit
    testing
    + JDK-8305763: Parsing a URI with an underscore goes through a
    silent exception, negatively impacting performance
    + JDK-8305766: ProblemList runtime/CompressedOops/
    /CompressedClassPointers.java
    + JDK-8305858: Resolve multiple definition of
    'handleSocketError' when statically linking with JDK native
    libraries
    + JDK-8305950: Have -XshowSettings option display tzdata version
    + JDK-8305995: Footprint regression from JDK-8224957
    + JDK-8306060: Open source few AWT Insets related tests
    + JDK-8306076: Open source AWT misc tests
    + JDK-8306134: Open source some AWT tests relating to Button
    and a few other classes
    + JDK-8306135: Clean up and open source some AWT tests
    + JDK-8306137: Open source several AWT ScrollPane related tests
    + JDK-8306281: function isWsl() returns false on WSL2
    + JDK-8306372: Open source AWT CardLayout and Checkbox tests
    + JDK-8306428: RunThese30M.java crashed with
    assert(early-&gt;flag() == current-&gt;flag() || early-&gt;flag() ==
    mtNone)
    + JDK-8306430: Open source some AWT tests related to
    TextComponent and Toolkit
    + JDK-8306435: Juggle04/TestDescription.java should be a
    booleanArr test and not a byteArr one
    + JDK-8306484: Open source several AWT Choice jtreg tests
    + JDK-8306566: Open source several clipboard AWT tests
    + JDK-8306575: Clean up and open source four Dialog related
    tests
    + JDK-8306636: Disable compiler/c2/Test6905845.java with
  - XX:TieredStopAtLevel=3
    + JDK-8306638: Open source some AWT tests related to
    datatransfer and Toolkit
    + JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr
    register
    + JDK-8306682: Open source a few more AWT Choice tests
    + JDK-8306718: Optimize and opensource some old AWT tests
    + JDK-8306738: Select num workers for safepoint
    ParallelCleanupTask
    + JDK-8306765: Some client related jtreg problem list entries
    are malformed
    + JDK-8306812: Open source several AWT Miscellaneous tests
    + JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks
    option
    + JDK-8307068: store a JavaThread* in the java.lang.Thread
    object after the JavaThread* is added to the main ThreadsList
    + JDK-8307078: Opensource and clean up five more AWT Focus
    related tests
    + JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
    + JDK-8307083: Open source some drag and drop tests 3
    + JDK-8307147: [x86] Dangling pointer warning for
    Assembler::_attributes
    + JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with
    UseCondCardMark for Serial/Parallel GC
    + JDK-8307156: native_thread not protected by TLH
    + JDK-8307165: java/awt/dnd/NoFormatsDropTest/
    /NoFormatsDropTest.java timed out
    + JDK-8307299: Move more DnD tests to open
    + JDK-8307301: Update HarfBuzz to 7.2.0
    + JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC)
    JFR event collection
    + JDK-8307395: Add missing STS to Shenandoah
    + JDK-8307446: RISC-V: Improve performance of floating point to
    integer conversion
    + JDK-8307526: [JFR] Better handling of tampered JFR repository
    + JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
    + JDK-8307569: Build with gcc8 is broken after JDK-8307301
    + JDK-8307572: AArch64: Vector registers are clobbered by some
    macroassemblers
    + JDK-8307603: [AIX] Broken build after JDK-8307301
    + JDK-8307604: gcc12 based Alpine build broken build after
    JDK-8307301
    + JDK-8307651: RISC-V: stringL_indexof_char instruction has
    wrong format string
    + JDK-8307653: Adjust delay time and gc log argument in
    TestAbortOnVMOperationTimeout
    + JDK-8307683: Loop Predication should not hoist range checks
    with trap on success projection by negating their condition
    + JDK-8307766: Linux: Provide the option to override the timer
    slack
    + JDK-8308089: [riscv-port-jdk17u] Intrinsify
    Unsafe.storeStoreFence
    + JDK-8308090: Add container tests for on-the-fly resource
    quota updates
    + JDK-8308152: PropertyDescriptor should work with overridden
    generic getter method
    + JDK-8308156: VerifyCACerts.java misses blank in error output
    + JDK-8308192: Error in parsing replay file when staticfield is
    an array of single dimension
    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the
    debuggee
    + JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on
    floats
    + JDK-8308283: Build failure with GCC12 &amp; GCC13
    + JDK-8308300: enhance exceptions in MappedMemoryUtils.c
    + JDK-8308643: Incorrect value of 'used' jvmstat counter
    + JDK-8308766: TLAB initialization may cause div by zero
    + JDK-8308803: Improve java/util/UUID/UUIDTest.java
    + JDK-8308872: enhance logging and some exception in
    krb5/Config.java
    + JDK-8308997: RISC-V: Sign extend when comparing 32-bit value
    with zero instead of testing the sign bit
    + JDK-8309088: security/infra/java/security/cert/
    /CertPathValidator/certification/AmazonCA.java fails
    + JDK-8309095: Remove UTF-8 character from
    TaskbarPositionTest.java
    + JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton
    predicates for all If nodes in loop predication
    + JDK-8309138: Fix container tests for jdks with symlinked conf
    dir
    + JDK-8309228: Clarify EXPERIMENTAL flags comment in
    hotspot/share/runtime/globals.hpp
    + JDK-8309254: Implement fast-path for ASCII-compatible
    CharsetEncoders on RISC-V
    + JDK-8309266: C2: assert(final_con == (jlong)final_int)
    failed: final value should be integer
    + JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
    + JDK-8309340: Provide sctpHandleSocketErrorWithMessage
    + JDK-8309427: [riscv-port-jdk17u] Remove unused
    RoundDoubleModeV C2 node
    + JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method
    should gracefully handle amounts equal to Long.MIN_VALUE
    + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
    + JDK-8309613: [Windows] hs_err files sometimes miss
    information about the code containing the error
    + JDK-8309746: Reconfigure check should include
    make/conf/version-numbers.conf
    + JDK-8309862: Unsafe list operations in JfrStringPool
    + JDK-8309956: Shenandoah: Strengthen the mark word check in
    string dedup
    + JDK-8309959: JFR: Display N/A for missing data amount
    + JDK-8310054: ScrollPane insets are incorrect
    + JDK-8310126: C1: Missing receiver null check in
    Reference::get intrinsic
    + JDK-8310259: Pin msys2/setup-msys2 github action to a
    specific commit
    + JDK-8310549: avoid potential leaks in KeystoreImpl.m related
    to JNU_CHECK_EXCEPTION early returns
    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/
    /interrupt001.java timed out due to missing prompt
    + JDK-8310873: Re-enable locked_create_entry symbol check in
    runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
    + JDK-8311033: [macos] PrinterJob does not take into account
    Sides attribute
    + JDK-8311249: Remove unused MemAllocator::obj_memory_range
    + JDK-8311285: report some fontconfig related environment
    variables in hs_err file
    + JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
    + JDK-8311862: RISC-V: small improvements to shift immediate
    instructions
    + JDK-8311923: TestIRMatching.java fails on RISC-V
    + JDK-8312029: Add CriticalNative tests to ProblemList for
    8312028
    + JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
    + JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative
    is failing: did not see the expected RSS reduction
    + JDK-8312555: Ideographic characters aren't stretched by
    AffineTransform.scale(2, 1)
    + JDK-8313262: C2:  Sinking node may cause required cast to be
    dropped
    + JDK-8313402: C1: Incorrect LoadIndexed value numbering
    + JDK-8313428: GHA: Bump GCC versions for July 2023 updates
    + JDK-8313576: GCC 7 reports compiler warning in bundled
    freetype 2.13.0
    + JDK-8313676: Amend TestLoadIndexedMismatch test to target
    intrinsic directly
    + JDK-8313678: SymbolTable can leak Symbols during cleanup
    + JDK-8313701: GHA: RISC-V should use the official repository
    for bootstrap
    + JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
    + JDK-8313796: AsyncGetCallTrace crash on unreadable
    interpreter method pointer
    + JDK-8313815: The exception messages printed by jcmd
    ManagementAgent.start are corrupted on Japanese Windows
    + JDK-8313874: JNI NewWeakGlobalRef throws exception for null
    arg
    + JDK-8314020: Print instruction blocks in byte units
    + JDK-8314117: RISC-V: Incorrect VMReg encoding in
    RISCV64Frame.java
    + JDK-8314118: Update JMH devkit to 1.37
    + JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
    + JDK-8314426: runtime/os/TestTrimNative.java is failing on
    slow machines
    + JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/
    /JMapHeapConfigTest.java fails
    + JDK-8314517: some tests fail in case ipv6 is disabled on the
    machine
    + JDK-8314552: Fix javadoc tests to work with jtreg 7
    + JDK-8314658: [17u] GHA: Sync up debian-version for
    cross-builds
    + JDK-8314730: GHA: Drop libfreetype6-dev transitional package
    in favor of libfreetype-dev
    + JDK-8314960: Add Certigna Root CA - 2
    + JDK-8317040: Exclude cleaner test failing on older releases
    + JDK-8317643: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
- Modified patches:
  * nss-security-provider.patch
  * fips.patch
    + rediff</changelog>
  <changelog author="fstrba@suse.com" date="1705492800">- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU)
  * CVEs
    + CVE-2024-20918, bsc#1218907
    + CVE-2024-20919, bsc#1218903
    + CVE-2024-20921, bsc#1218905
    + CVE-2024-20932, bsc#1218908
    + CVE-2024-20945, bsc#1218909
    + CVE-2024-20952, bsc#1218911
  * Security fixes
    + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a
    file entry when there is a directory entry of the same name
    within a Zip File
    + JDK-8308204: Enhanced certificate processing
    + JDK-8314295: Enhance verification of verifier
    + JDK-8314307: Improve loop handling
    + JDK-8314468: Improve Compiler loops
    + JDK-8316976: Improve signature handling
    + JDK-8317547: Enhance TLS connection support
  * Other changes
    + JDK-6445283: ProgressMonitorInputStream not large file aware
    (&gt;2GB)
    + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java
    fails with java.lang.RuntimeException: Test failed, scroll on
    drag doesn't work
    + JDK-8061729: Update java/net tests to eliminate dependency on
    sun.net.www.MessageHeader and some other internal APIs
    + JDK-8161536: sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java fails with ProviderException
    + JDK-8168469: Memory leak in JceSecurity
    + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002:
    TestFailure: Unexpected size of referenceType
    .instances(nsk.share.jdi.TestInterfaceImplementer1): 11,
    expected: 10
    + JDK-8193543: Regression automated test '/open/test/jdk/java/
    /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'
    fails
    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/
    /isexceeded001/TestDescription.java still failing
    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not
    clean up
    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/
    /ChoicePopupLocation.java fails
    + JDK-8207166: jdk/jshell/
    /JdiHangingLaunchExecutionControlTest.java - launch timeout
    + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatObjectCorrectnessTest.java failed with
    Unexpected high difference percentage
    + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+
    Network interfaces on Linux but finding 1
    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to
    "FAILED: Did not get expected IllegalThreadStateException on a
    StepRequest.enable()"
    + JDK-8232933: Javac inferred type does not conform to equality
    constraint
    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/
    /AccessibleChoiceTest.java fails
    + JDK-8244289: fatal error: Possible safepoint reached by
    thread that does not allow it
    + JDK-8247351: [aarch64] NullPointerException during stack
    walking (clhsdb "where -a")
    + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o
    bug-id
    + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java
    failed with "RuntimeException: Not found expected
    SSLHandshakeException in java.io.IOException"
    + JDK-8262186: Call X509KeyManager.chooseClientAlias once for
    all key types
    + JDK-8262901: [macos_aarch64] NativeCallTest
    expected:&lt;-3.8194101E18&gt; but was:&lt;3.02668882E10&gt;
    + JDK-8265586: [windows] last button is not shown in AWT Frame
    with BorderLayout and MenuBar set.
    + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails
    with "assert(java_thread == _state-&gt;get_thread()) failed: Must be"
    + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java
    fails with Unable to send object throw not established PipeIO
    Listener Thread connection
    + JDK-8268916: Tests for AffirmTrust roots
    + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to
    attach
    + JDK-8270199: Most SA tests are skipped on macosx-aarch64
    because all executables are signed
    + JDK-8270447: [IR Framework] Add missing compilation level
    restriction when using FlipC1C2 stress option
    + JDK-8271073: Improve testing with VM option
    VerifyArchivedFields
    + JDK-8271566: DSA signature length value is not accurate in
    P11Signature
    + JDK-8271824: mark hotspot runtime/CompressedOops tests which
    ignore external VM flags
    + JDK-8271826: mark hotspot runtime/condy tests which ignore
    external VM flags
    + JDK-8271828: mark hotspot runtime/classFileParserBug tests
    which ignore external VM flags
    + JDK-8271829: mark hotspot runtime/Throwable tests which
    ignore external VM flags
    + JDK-8271886: mark hotspot runtime/InvocationTests tests which
    ignore external VM flags
    + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests
    which ignore external VM flags
    + JDK-8271890: mark hotspot runtime/Dictionary tests which
    ignore external VM flags
    + JDK-8271891: mark hotspot runtime/Safepoint tests which
    ignore external VM flags
    + JDK-8271892: mark hotspot runtime/PrintStringTableStats/
    /PrintStringTableStatsTest.java test as ignoring external VM
    flags
    + JDK-8271893: mark hotspot runtime/PerfMemDestroy/
    /PerfMemDestroy.java test as ignoring external VM flags
    + JDK-8271904: mark hotspot runtime/ClassFile tests which
    ignore external VM flags
    + JDK-8271905: mark hotspot runtime/Metaspace tests which
    ignore external VM flags
    + JDK-8272099: mark hotspot runtime/Monitor tests which ignore
    external VM flags
    + JDK-8272291: mark hotspot runtime/logging tests which ignore
    external VM flags
    + JDK-8272551: mark hotspot runtime/modules tests which ignore
    external VM flags
    + JDK-8272552: mark hotspot runtime/cds tests which ignore
    external VM flags
    + JDK-8272998: ImageIO.read() throws incorrect exception type
    + JDK-8273456: Do not hold ttyLock around stack walking
    + JDK-8273522: Rename test property vm.cds.archived.java.heap
    to vm.cds.write.archived.java.heap
    + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails
    with release VMs
    + JDK-8273831: PrintServiceLookup spawns 2 threads in the
    current classloader, getting orphaned
    + JDK-8273921: Refactor NSK/JDI tests to create thread using
    factory
    + JDK-8274211: Test man page that options are documented
    + JDK-8274345: make build-test-lib is broken
    + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/
    /soft004.java fails with assert(_phases-&gt;length() &lt;= 1000)
    failed: Too many recored phases?
    + JDK-8275333: Print count in "Too many recored phases?" assert
    + JDK-8275440: Remove VirtualSpaceList::is_full()
    + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible
    across builds
    + JDK-8276036: The value of full_count in the message of
    insufficient codecache is wrong
    + JDK-8276054: JMH benchmarks for Fences
    + JDK-8276711: compiler/codecache/cli tests failing when
    SegmentedCodeCache used with -Xint
    + JDK-8276819: javax/print/PrintServiceLookup/
    /FlushCustomClassLoader.java fails to free
    + JDK-8277307: Pre shared key sent under both session_ticket
    and pre_shared_key extensions
    + JDK-8279856: Parallel: Use PreservedMarks to record
    promotion-failed objects
    + JDK-8281015: Further simplify NMT backend
    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails
    with java.lang.RuntimeException: values differ by more than
    1GB
    + JDK-8281874: Can't unpack msi installers from test/jdk/tools/
    /jpackage/windows/test/jdk/tools/jpackage/windows/
    /WinShortcutPromptTest.java test
    + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java
    test fails if light.exe is not in %PATH%
    + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/
    /B6216082.java fails with "SocketException: Unexpected end of
    file from server"
    + JDK-8283670: gtest os.release_multi_mappings_vm is still racy
    + JDK-8284047: Harmonize/Standardize the
    SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
    + JDK-8285516: clearPassword should be called in a finally try
    block
    + JDK-8285785: CheckCleanerBound test fails with
    PasswordCallback object is not released
    + JDK-8285867: Convert applet manual tests
    SelectionVisible.java to Fr